Privacy Policy

Welcome to MyBriefy (the "Software"), a service owned and operated by Glitch Software Development LLC ("MyBriefy", "we", "us"). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains what we collect when you use mybriefy.io and the Software, why we collect it, who we share it with, and the choices and rights you have. If you do not agree with this policy, please do not use the Software.

1. Who is responsible for your data

For your account information, billing details and how you use our website, Glitch Software Development LLC is the data controller.

For the content you and your team add to MyBriefy about your own clients (for example client names, contact details, briefs, contracts, notes and files), you, or the organization you belong to, are the controller and we act as your processor. We handle that content only to provide the Software to you and on your instructions. If you are one of our customers' clients and want to exercise your privacy rights, please contact the agency or business that added your information. We will help them respond.

2. Information we collect

Information you give us

• Account details: your name, email address, password (stored only as a secure hash by our authentication provider), company name and job position.
• Workspace content: briefs and brief answers, projects, client and contact records (names, email addresses, phone numbers), brand information, comments, updates, to-dos, notes, and contracts or other documents you upload.
• Team and client invitations: the names and email addresses of people you invite to collaborate.
• Billing details: when you subscribe to a paid plan, Stripe collects and processes your payment card details. We never see or store your full card number. We receive your plan, billing status and a Stripe customer reference.
• Support messages and live chat: anything you send us by email or through the Software. If you use the "Talk to us" chat while signed out, we ask for your full name, email address and phone number (with country code); if you are signed in, we use your account name, email address and company name instead. We also record the page you started the chat from.
• Questions to Briefy, our AI assistant: the questions you type and the workspace scope you choose (see section 4).
• Wellness reminder settings: which reminders you switch on, their timing and your working hours (see section 6).

Information collected automatically

• Technical and usage data: IP address, browser and device type, pages visited, and timestamps, which our hosting and security systems record to keep the Software running and secure.
• Cookies and similar storage: see section 8.

3. How we use your information

• Create and manage your account and authenticate you when you sign in.
• Provide the Software's features, including sharing briefs with the team members and clients you invite.
• Send you service emails such as sign-up confirmations, password resets, invitations, brief and approval notifications, and billing receipts.
• Process subscription payments and manage your plan.
• Send you marketing and promotional emails about MyBriefy. You can unsubscribe at any time using the link in any marketing email.
• Improve the Software and develop new products, services, features and functionality.
• Keep the Software secure, prevent fraud and abuse, and comply with our legal obligations.

We do not sell your personal data, and we do not use the content of your workspace (your briefs, client records or documents) for advertising.

4. Briefy, our AI assistant

Briefy is an optional AI assistant inside MyBriefy. When you ask Briefy a question, we send your question, the earlier messages of that conversation and the MyBriefy information you are allowed to see in the scope you picked (for example one client's briefs, or an overview of your clients, tasks and contracts) to our AI provider, Anthropic, which generates the answer. Clients of an agency only ever share their own project's briefs with Briefy. Briefy cannot browse the web or contact anyone. When you ask about a task, it can read that task in full, including its comments and attached files. When you ask it to, it can prepare a new task, a change to a task (for example marking it done or moving its due date) or a comment that mentions a teammate, but nothing happens until you review it and confirm it in the chat; it cannot change anything else in your workspace.

• Training: under Anthropic's commercial terms, the content we send is not used to train its models by default.
• Retention by Anthropic: Anthropic deletes API inputs and outputs within 30 days, unless it must keep them longer to enforce its usage policy or to comply with the law.
• What we keep: we do not store the text of your Briefy conversations; they stay in your browser tab and disappear when you close it. We keep a usage record for each message (date, workspace, user, the AI model used and the size of the request) to apply monthly message allowances and to bill extra message packs.
• Accuracy: AI answers can be incomplete or wrong. Briefy is a helper, not a decision-maker: it makes no automated decisions that have legal or similarly significant effects on you.

Our legal basis is the performance of our contract with you (providing a feature you choose to use). Agencies remain the controllers of the client information they put into MyBriefy and decide which of their team members and clients can use Briefy.

5. Live chat ("Talk to us")

The Briefy bubble lets anyone, including visitors who are not signed in, chat with our team. Replies are written by a person on the MyBriefy team, shown as "Head Panda", not by AI. We use the details you give us and your messages only to answer you, including by email or phone if you have left the website, and to keep a record of the conversation. When the team is offline, new messages are forwarded to our support inbox. Our legal bases are taking steps at your request before entering into a contract (sales questions), performance of our contract (support for customers) and our legitimate interest in answering enquiries. We do not use chat details for marketing unless you separately agree to it.

To protect the chat from spam and abuse, we also record the IP address each conversation is sent from and show it to our team. If someone misuses the chat, for example by sending spam or abusive messages, we may block their IP address, email address or browser from using it. This relies on our legitimate interest in keeping the service secure. The IP address is deleted together with the conversation, and blocks are lifted automatically after 24 months or sooner if we decide to lift them. If you think you were blocked by mistake, email us at hello@mybriefy.io.

6. Wellness reminders

You can ask Briefy to remind you to drink water, stretch, rest your eyes, take a breathing break, eat, or log off at the end of your workday, and to check in on how you are feeling. We store only your reminder settings with your account. The reminders run in your browser while MyBriefy is open, which keeps a note of when each reminder last appeared on your device. Your answers to "How are you feeling?" are not saved or sent to us; Briefy's replies are pre-written. Desktop notifications appear only if you allow them in your browser. Wellness reminders are general well-being prompts, not medical advice. You can switch them off at any time in the Wellness tab.

7. MyBriefy for Chrome (browser extension)

If you install MyBriefy for Chrome, the extension reads the email you have open in Gmail or Outlook on the web and, when you choose "Find every task in this thread", every message in that conversation, or text you select and send using the right-click menu, only when you open Briefy's sidebar or choose that menu item. It reads each sender's name and email address, the date and time sent, the subject, the message text, the names of attachments and the link to the email. This content is sent to MyBriefy only to draft tasks for you. When you ask Briefy to find the tasks in a thread, the thread's text is also sent to our AI provider, Anthropic, under the terms in section 4. Attachments are downloaded from your mailbox only when you tick them and create the task, and are then stored with that task. Content is saved only if you choose "Send to MyBriefy" or create the tasks, in which case it becomes part of those tasks. The extension does not read other websites, does not track your browsing, and we do not sell this data, share it for advertising, or use it to train AI models. The extension keeps a sign-in token on your device so it stays connected; you can remove it at any time with "Disconnect" or by uninstalling the extension. Our use of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

8. Cookies and tracking technologies

Essential cookies. We use cookies that are strictly necessary to keep you signed in and to keep your session secure. The Software cannot work without them. The Briefy bubble also uses your browser's local storage for features you ask for: a random code that reconnects you to your live chat, and the times your wellness reminders last appeared. These are strictly necessary for those features, are not used for tracking or advertising, and you can clear them in your browser settings.

Analytics and advertising. On our marketing website we may use analytics and advertising technologies, such as Google Ads and the tracking pixels of Meta, LinkedIn and TikTok, to understand how visitors find us and to measure our advertising. Where the law requires it, we will only set these after you have given consent, and you can change your choice at any time. You can also block or delete cookies through your browser settings. Doing so will not affect essential cookies needed to sign in, unless you block those too.

9. Who we share your information with

We share personal data only as needed to run the Software, with service providers who process it on our behalf under data processing agreements:

When you use Briefy, Anthropic receives the content described in section 4. If you consent to advertising cookies, the advertising platforms we use receive information about your visit to our marketing website under their own privacy policies: Google, Meta, LinkedIn, TikTok.

We may also disclose information if required by law or to protect our rights, users or the public, or to a buyer or successor as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

10. International data transfers

Our database and file storage are hosted in the European Union. Some of our providers, including Vercel, Stripe and Anthropic, may process data in the United States or other countries. Where personal data from the EU, EEA, UK or Switzerland is transferred outside those regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as applicable to each provider.

11. How long we keep your data

We keep your account and workspace data for as long as your account is active. If you delete your account, or ask us to, we will delete or anonymize your personal data within 30 days. Copies in backups are overwritten in the normal course of backup rotation. We keep billing and transaction records for as long as tax and accounting laws require.

Live chat conversations are kept while we help you and are deleted automatically 24 months after the last message, or sooner if you ask us. Briefy usage records are kept while your workspace exists, so we can apply allowances and answer billing questions. Wellness settings are deleted with your account. Anthropic's own retention is described in section 4.

12. Data security and breach notification

We protect your data with industry-standard measures. These include encryption in transit (HTTPS) and at rest, row-level access controls so that each organization can only reach its own data, hashed passwords, and restricted access to production systems. No system is perfectly secure, so we cannot guarantee absolute security.

If we become aware of a personal data breach that affects you, we will:

• Notify affected users without undue delay and, where required by applicable law, within 72 hours of becoming aware of the breach.
• Explain the nature of the breach, the data affected, and the steps taken to reduce its impact.

13. Your rights and choices

You can view and update most of your information directly in the Software. It is your responsibility to manage the content you add and to decide which team members and clients you share your briefs with. You can also ask us to access, correct, export or delete your personal data, or to close your account, by emailing hello@mybriefy.io. We will respond within the time limits that apply under the law, usually within one month.

EU, EEA and UK users

Under the GDPR and UK GDPR you also have the right to data portability, to restrict or object to processing, and to withdraw consent at any time without affecting processing that happened before you withdrew it. You may lodge a complaint with your local data protection authority. Our legal bases for processing are:

• Contract: to provide the Software you signed up for.
• Consent: for marketing emails where required, and for non-essential cookies.
• Legitimate interests: to run, secure and improve our business and services.
• Legal obligation: for example, keeping billing records.

California users

Under the CCPA, as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to request deletion or correction; to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising; and not to be discriminated against for exercising these rights. We do not sell personal information. To opt out of sharing for advertising, decline advertising cookies or email hello@mybriefy.io. We honor Global Privacy Control browser signals as an opt-out where they are detected.

14. Children

MyBriefy is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through the Software before they take effect. The "Last updated" date above shows when this policy last changed. Your continued use of the Software after changes take effect means you accept the updated policy.

16. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, or want to exercise your rights, please contact us at:
Glitch Software Development LLC (MyBriefy.io)
867 Boylston Street, 5th Floor, Boston, MA 02116, USA
Email: hello@mybriefy.io