Privacy Policy — Briefvex

Briefvex ("we", "us", "our") operates the briefvex.com platform. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have over it.

1. Data We Collect

Account information

When you sign up we collect your name, email address, and organization details via our authentication provider. You may also provide a profile picture and job title.

Meeting data

When you connect a calendar or conferencing account, Briefvex records meetings you designate. This includes audio recordings, generated transcripts, AI-produced summaries, action items, and participant metadata (names, email addresses).

CRM & integration data

If you enable HubSpot, Linear, or other integrations, Briefvex reads and writes contact records, deal stages, and issue tickets on your behalf.

Usage data

We automatically collect device type, browser version, IP address, pages visited, and feature-usage events to maintain and improve the service.

2. How We Process Your Data

AI summarization — Meeting transcripts are processed by language models to generate summaries, action items, and follow-up email drafts.
CRM sync — Summaries and metadata are pushed to connected CRM and project-management tools according to your mapping rules.
Email drafting — Follow-up emails are drafted using meeting context and sent only when you explicitly approve them.
Analytics — Aggregated, non-identifying usage statistics help us understand feature adoption and service performance.

3. Third-Party Data Processors

We share personal data only with the processors necessary to deliver the service:

Better Auth — Authentication and user management (self-hosted)
Supabase — Database hosting and file storage
Paddle — Payment processing (merchant of record)
Recall.ai — Meeting recording and real-time capture
OpenAI — Transcription and AI summarization
Anthropic — Follow-up email drafting
Deepgram — Multi-language transcription
Resend — Transactional email delivery

Each processor is contractually bound to process data only for the purposes described above and to maintain appropriate security measures.

4. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

Access — Request a copy of the personal data we hold about you.
Rectification — Ask us to correct inaccurate or incomplete data.
Erasure — Request deletion of your personal data when it is no longer necessary for the purposes it was collected.
Portability — Receive your data in a structured, machine-readable format.
Objection — Object to processing based on legitimate interests.

To exercise any of these rights, email privacy@briefvex.com. We will respond within 30 days.

5. Data Retention & Deletion

We retain meeting recordings for 90 days after generation unless you delete them sooner. Transcripts and summaries are retained for the lifetime of your account. When you delete your account, all associated personal data is permanently erased within 30 days, except where retention is required by law (e.g., billing records).

6. Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is restricted to authorized personnel and audited. We conduct regular security reviews of our infrastructure and third-party integrations.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 30 days before they take effect.

8. Contact

Questions or concerns? Reach us at privacy@briefvex.com.

See also our Terms of Service and Cookie Policy.