Privacy Policy

AI Brief (“we”, “us”) is a closed-beta tool that turns rough client briefs into structured technical specifications using AI. This page describes what data we collect, how we use it, and what rights you have over it.

1. Data we collect

• Account data. Your email address and a password hash. We never store your password in plain text.
• Brief content. The text you paste into the brief input and the AI-generated specification we return. This is stored so you can revisit it in your history.
• Usage events. A counter of how many briefs you have generated, used to enforce the closed-beta limit.
• Technical data. Standard server logs (IP address, user agent, request timestamps) kept for security and debugging.
• Captcha tokens. When you sign up, hCaptcha issues a one-time token we forward to their verification API. We never store the token.

2. How we use your data

• To authenticate you and let you sign back in.
• To generate specifications from your brief input (we send the brief to Anthropic’s Claude API for processing).
• To enforce closed-beta usage limits.
• To prevent bot signups (via hCaptcha).
• To investigate errors and protect the service from abuse.

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

3. Where data is stored

• Supabase (EU region) — account records and brief history. Communication is encrypted in transit (HTTPS) and at rest.
• Anthropic — receives the brief text you submit so their Claude model can process it. Anthropic’s API terms forbid using API content for training.
• hCaptcha — receives a one-time token to verify the captcha challenge.
• Resend — sends transactional emails (signup confirmation and password reset).
• Vercel — hosts the application and serves it via their global CDN. Vercel sees request metadata (IP, user agent) for routing.

4. Cookies

We use a single first-party cookie set by Supabase to keep you logged in. We do not use third-party advertising or tracking cookies. If we add analytics in the future, we will update this page first.

5. Your rights

You can at any time:

• See your account email inside the app (top-right menu).
• Reset your password (forgot-password flow on the sign-in form).
• Request a copy of all data we have about you, or request that we delete your account and all associated briefs. Email hello@briefhelper.xyz and we will process the request within 30 days.

6. Children

AI Brief is not intended for users under 18. If you are under 18, do not create an account. If we become aware we are storing data for a minor, we will delete it.

7. Changes

We may update this policy as the product evolves. Material changes will be communicated by email to the address on your account before they take effect. The “Last updated” date at the top is always current.

8. Contact

Questions or requests: hello@briefhelper.xyz.