Privacy Policy

This Policy applies to: (a) visitors to briefwell.ai and related marketing pages; (b) individuals who contact us or join our email list; and (c) authorized users of a customer workspace (the “Customer”) and the Customer’s account administrators.

For Customer workspaces, Briefwell typically acts as a processor / service provider of Customer Content (defined below) on the Customer’s instructions, and as a controller of account, billing, support, and marketing data we collect for our own business purposes. Where a Customer has a separate written agreement with us, that agreement controls to the extent of any conflict with this Policy regarding Customer Content.

A. Information you provide

• Account and profile data: name, work email, company, role, password or authentication credentials, and workspace membership details.
• Business contact data: information you submit in demo requests, support tickets, sales conversations, or email-list signups.
• Customer configuration: sources to monitor, research topics and monitoring context you describe, scoring preferences, custom fields, brief schedules, delivery destinations (for example Slack, email recipients, webhooks), and related settings.
• Optional Customer Content you connect or upload: CRM records, datasets, spreadsheets, files, or other business data you choose to provide so we can enrich briefs. Credentials for systems you connect are stored encrypted. You control what you connect.
• Recipient information: names and email addresses or channel identifiers of the people a Customer designates to receive briefs. We use this information only to deliver the briefs that Customer configures, and brief emails include an unsubscribe link.
• Communications: messages you send us and related correspondence.

B. Information collected automatically

• Usage and product analytics: aggregate marketing-site page views, pages and features used, alert interactions (including feedback), API calls, and timestamps.
• Device and log data: IP address, browser type, operating system, referring URL, and diagnostic or security logs.
• Cookies and similar technologies: session and authentication tokens, preference settings, and limited analytics needed to operate and improve the Service. Marketing page views are logged without an identifier; if you accept cookies, we may set a first-party visitor identifier to distinguish new from returning visitors. We do not use advertising cookies to sell your data.

C. Public-source monitoring content

The Service monitors publicly available web pages and public datasets that a Customer asks us to watch and, for research-type sources, runs web searches and retrieves publicly available pages relevant to a topic the Customer describes. We store the specific details we monitor, records of what changed, extracted updates, search results, source metadata, and generated briefs so we can detect changes and deliver briefs. We do not retain copies of the full pages themselves. That content is generally public information about companies, products, filings, incidents, or other public events — not information we solicit from private individuals behind a login.

Public pages may incidentally include personal information published by third parties. We process that content only to provide the Service to the Customer that configured the source, and we do not use it to build marketing profiles of those individuals.

We use information to:

• Provide, operate, secure, and improve the Service — including monitoring sources, detecting changes, generating briefs, routing alerts, and supporting delivery channels.
• Authenticate users, manage workspaces, and enforce access controls.
• Communicate about the Service, including transactional messages, security notices, onboarding, and support.
• Send optional product or market updates if you join our email list or otherwise opt in. You may unsubscribe at any time.
• Analyze aggregate usage to improve reliability and product quality.
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms.
• Comply with law, respond to lawful requests, and protect our rights and users.

We do not sell personal information. We do not use Customer Content or monitored public-source content to train generalized foundation models for unrelated third parties. We may use de-identified or aggregated operational metrics to improve the Service.

We share information only as needed to operate the Service or as required by law:

• Service providers / subprocessors that host infrastructure, send email, provide authentication or databases, run AI model inference through the providers’ official commercial APIs, perform web search for research sources, or otherwise support operations. They may process data only on our instructions and for Service-related purposes. A list of our current subprocessors is available on request.
• Delivery destinations you configure (Slack, email recipients, webhooks, and similar). Content you ask us to send is disclosed to those systems under your control.
• Professional advisors (legal, accounting) under confidentiality obligations when reasonably necessary.
• A buyer or successor in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice where required.
• Authorities or other parties when we believe disclosure is required by law, legal process, or to protect rights, safety, or security.

“Customer Content” means configuration, connected business data, alert history, and other materials a Customer submits to or stores in its workspace. The Customer determines what sources to monitor and what optional business data to connect. Briefwell processes Customer Content to provide the Service and as otherwise directed by the Customer or required by law.

Customers are responsible for having a lawful basis to provide Customer Content to us, for configuring destinations correctly, and for using alerts in compliance with applicable law (including marketing, solicitation, employment, securities, and privacy laws that may apply to the Customer’s industry).

We use essential cookies and similar storage to keep you signed in, protect the Service, and remember preferences. We use aggregate, first-party page-view analytics to understand how the marketing site is used. Marketing page views are sent without a visitor identifier; if you accept cookies, we may set a first-party `bw_vid` identifier for new-versus-returning reporting. You can control cookies through your browser settings; disabling essential cookies may break sign-in or core features. We do not use advertising cookies for cross-context behavioral advertising.

We retain information only as long as needed for the purposes described in this Policy, including to provide the Service, resolve disputes, enforce agreements, and meet legal requirements.

• Account and workspace data: retained while the account is active and for a reasonable period afterward for backup, dispute resolution, and legal compliance.
• Monitored details, change records, and briefs: retained according to the Customer’s plan, configuration, and our operational needs to provide history, sourcing, and reliable delivery.
• Email-list and marketing contacts: retained until you unsubscribe or we delete the list entry in the ordinary course.
• Security and server logs: typically retained for a limited period needed for security and debugging, then deleted or aggregated.

When a Customer terminates and requests deletion, we delete or de-identify Customer Content within a commercially reasonable period, except where retention is required by law, needed to resolve disputes, or stored in encrypted backups that rotate out on a fixed schedule.

We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit (TLS), encryption of sensitive credentials at rest, role-based access controls, and network and application safeguards. No method of transmission or storage is completely secure. If you believe you have found a vulnerability, contact privacy@briefwell.ai.

We and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers. By using the Service, you understand that your information may be transferred to jurisdictions with different data-protection laws than your own.

Depending on your location, you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a denied request where applicable law provides that right.

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of “sale” or “sharing” as those terms are defined by California law. We do not sell personal information and do not share it for cross-context behavioral advertising.

To exercise rights, email privacy@briefwell.ai with sufficient detail for us to verify your identity and locate your information. We will respond within the time required by applicable law. If you are an end user of a Customer workspace, we may redirect your request to that Customer when they are the controller of the relevant data.

If you receive brief emails from a Customer’s workspace, every brief email includes an unsubscribe link. You may also email privacy@briefwell.ai to stop delivery.

The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time. The “Last updated” date will change when we do. Material changes will be posted on this page and, where appropriate, communicated by email or in-product notice. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

Questions about this Privacy Policy or your personal information: