Privacy Policy

1. Data we collect

We collect only what we need to run the service:

• Account details: your name, email address and a securely hashed password.
• Content you provide: résumés (pasted text or uploaded files), job descriptions and recruiter notes.
• Content we generate for you: candidate briefs and your edits and review status.
• Billing details: subscription status and plan. Card payments are handled by Stripe; we never see or store your full card number.
• Usage data: basic analytics (for example, pages visited) collected through Google Analytics to help us improve the product.

2. How we use your data

• To create your account, sign you in and provide the service.
• To generate, store and display your candidate briefs.
• To manage your subscription, free briefs and usage limits.
• To send service emails such as welcome messages, subscription confirmations and password resets.
• To keep the service secure and to understand, in aggregate, how it is used.

3. AI processing

When you generate or regenerate a brief, the résumé, job description and notes you submit are sent to a third-party large language model provider for processing. This content is used only to produce your brief and is not used by us to train AI models.

AI output can be inaccurate or incomplete. Every brief is a draft that must be reviewed by a recruiter before it is shared with anyone.

You are responsible for having a lawful basis to process the candidate information you upload, and for informing candidates where the law requires it.

4. We do not sell your data

We do not sell, rent or trade your personal data or the candidate data you upload. We share data only with service providers that help us operate BriefAssist (hosting and storage, AI processing, payments, email delivery and analytics), and only as needed to provide the service, or where required by law.

5. Data retention and security

We keep your account data and briefs for as long as your account is active. You can ask us to delete your account and its data at any time by emailing [email protected]. Passwords are stored as one-way hashes, and data is transmitted over encrypted connections.

6. Your rights (GDPR and CCPA)

Depending on where you live, including the UK, the European Economic Area and California, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing.
• Know what personal information is collected and opt out of its sale (we do not sell it).
• Not be discriminated against for exercising these rights.
• Lodge a complaint with your local data protection authority.

7. Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above and, for significant changes, let account holders know by email.

8. Governing law and contact

This policy is governed by the laws of England and Wales. To exercise any of your rights or ask a question about your data, contact us at [email protected].