Back to Home

Privacy Policy

Last updated: March 2026

1. Introduction

Welcome to Brieflify ("we", "us", "our"), a software-as-a-service platform operated from the Republic of South Africa and accessible at brieflify.info.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use the Brieflify platform, including any associated applications, features, tools, and services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, you should not access or use the Service.

This policy is intended to comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa and incorporates principles consistent with the General Data Protection Regulation (GDPR) of the European Union where applicable.

2. Information We Collect

We collect information in order to provide, operate, and improve the Service. The types of information we collect include the following:

2.1 Account Information

When you create an account, we collect your name, email address, and a securely hashed version of your password. We do not store your password in plain text. You may also provide optional profile information such as a display name, organisation, or role.

2.2 Content You Provide

The Service allows you to submit, upload, and generate content including meeting notes, transcripts, conversation data, decisions, action items, agendas, and other documents ("User Content"). We collect and store this content solely to provide the Service to you.

2.3 Usage Data

We automatically collect certain information when you interact with the Service, including the pages you visit, features you use, actions you take, the date and time of your visits, device information (such as browser type, operating system, and screen resolution), and your Internet Protocol (IP) address. This data is collected to help us understand how the Service is used and to identify areas for improvement.

2.4 Payment Information

If you subscribe to a paid plan, your payment is processed by a third-party payment processor. We do not directly collect, store, or have access to your full credit card number or bank account details. We may receive limited billing information from our payment processor, such as the last four digits of your card, the card brand, expiry date, and billing address, solely for the purpose of managing your subscription and generating invoices.

2.5 AI Interaction Data

When you use AI-powered features of the Service, we collect the prompts you send, the outputs generated by AI models, and associated metadata (such as which model was used, token usage, and timestamps). This data is necessary for delivering, troubleshooting, and improving the AI-driven functionality of the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and operate the Service: including processing your User Content through AI models to generate summaries, decisions, action items, and other outputs.
  • To manage your account and billing: including processing subscriptions, maintaining your account settings, and handling support requests.
  • To improve the Service: including analysing usage patterns, diagnosing technical issues, and developing new features.
  • To communicate with you: including sending service-related notices, security alerts, billing updates, and responding to your enquiries.
  • To detect and prevent abuse: including monitoring for fraudulent activity, violations of our terms of service, and other harmful conduct.
  • To comply with legal obligations: including responding to lawful requests from governmental authorities and fulfilling our obligations under applicable law.

Important commitments regarding your data:

  • We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.
  • We do not use your User Content to train, fine-tune, or improve AI models. Your content is yours, and it remains yours.

4. AI Processing Disclosure

Brieflify uses artificial intelligence to process your content and generate outputs such as summaries, decisions, action items, and insights. It is important that you understand how this processing works:

4.1 Third-Party AI Providers

Content you submit may be processed by third-party AI providers, which may include but are not limited to OpenAI, Anthropic, and Google. These providers process your content in order to generate outputs on your behalf. We select providers that maintain industry-standard data protection practices; however, we do not control how third-party AI providers handle data once it is transmitted to them. You should review the privacy policies and terms of service of these providers independently.

4.2 Bring Your Own Key (BYOK)

Brieflify offers a "Bring Your Own Key" feature that allows you to connect your own API key from a supported AI provider. When using BYOK, your content is sent directly from our infrastructure to the AI provider using your API credentials. In this mode, your use of the AI provider is governed by your own agreement with that provider, and you are responsible for reviewing and accepting their data handling practices. We do not have visibility into or control over the specific terms of your agreement with the AI provider.

4.3 Managed AI Processing

When you use Brieflify's managed AI credits (included with paid plans or purchased separately), your content is transmitted through our infrastructure to our contracted AI providers. We maintain agreements with these providers that include data protection obligations; however, you acknowledge that the processing of your content by these providers is subject to their respective privacy policies and terms.

4.4 Storage of AI Outputs

AI-generated outputs (such as summaries, extracted decisions, and action items) are stored as part of your account data and are subject to the same data retention and protection practices described in this policy. You may delete AI-generated content at any time through the Service.

5. Data Storage and Security

We take the security of your personal information seriously and implement a range of measures designed to protect it from unauthorised access, alteration, disclosure, or destruction:

  • Encryption in transit: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS/SSL).
  • Encryption at rest: Data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
  • Access controls: Access to personal information is restricted to authorised personnel on a need-to-know basis. We employ role-based access controls and multi-factor authentication for administrative access.
  • Secure infrastructure: Our Service is hosted on reputable cloud infrastructure providers that maintain comprehensive security certifications and undergo regular independent audits.
  • Regular security practices: We conduct regular reviews of our security practices and respond promptly to identified vulnerabilities.

Despite our efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, as outlined in this policy:

  • Active accounts: Your account information and User Content are retained for the duration of your active use of the Service.
  • Account deletion: Upon receiving a valid account deletion request, we will delete or anonymise your personal information within thirty (30) days, except where retention is required by law or legitimate business purposes (such as resolving disputes or enforcing our agreements).
  • Legal and compliance retention: Certain data may be retained beyond the deletion period where required to comply with legal obligations, resolve disputes, prevent fraud, or enforce our terms of service.
  • Backup systems: Copies of your data may persist in our backup systems for a limited period (typically up to 90 days) after deletion from production systems. These backups are encrypted, access-restricted, and automatically purged on a rolling basis.

7. Third-Party Services

We engage third-party service providers to assist in operating and improving the Service. These providers may have access to your personal information solely to perform tasks on our behalf and are contractually obligated to protect it. Categories of third-party services we use include:

  • Cloud hosting and infrastructure: for storing and serving your data securely.
  • AI processing providers: for generating AI-powered outputs from your content (see Section 4 above).
  • Payment processing: for handling subscription billing and payments securely.
  • Analytics: for understanding usage patterns and improving the Service.
  • Email and communication services: for sending transactional and service-related communications.

Each third-party provider operates under its own privacy policy. We encourage you to review the privacy policies of any third-party services that interact with your data. We are not responsible for the privacy practices or data handling of third-party services.

8. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. These rights are provided in compliance with the Protection of Personal Information Act (POPIA) of South Africa and are extended in the spirit of the General Data Protection Regulation (GDPR) to all users:

  • Right of access: You have the right to request a copy of the personal information we hold about you and to receive information about how it is processed.
  • Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
  • Right to erasure: You have the right to request the deletion of your personal information, subject to certain legal exceptions.
  • Right to data portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit it to another service provider where technically feasible.
  • Right to object: You have the right to object to the processing of your personal information where we rely on legitimate interests as the legal basis for processing.
  • Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
  • Right to lodge a complaint: If you believe that your personal information has been processed in violation of applicable law, you have the right to lodge a complaint with the Information Regulator of South Africa or the relevant supervisory authority in your jurisdiction.

To exercise any of these rights, please contact us at privacy@brieflify.info. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.

9. Cookies

We use cookies and similar tracking technologies to operate and enhance the Service. Our use of cookies is minimal and falls into the following categories:

  • Strictly necessary cookies: These cookies are essential for the operation of the Service, including authentication, session management, and security. They cannot be disabled without impairing the functionality of the Service.
  • Functional cookies: These cookies remember your preferences and settings (such as language and display preferences) to provide a more personalised experience.
  • Analytics cookies (optional): With your consent, we may use analytics cookies to understand how you interact with the Service, which pages are most visited, and how we can improve the user experience. You may opt out of analytics cookies at any time.

Most web browsers allow you to control cookies through their settings. Please note that disabling essential cookies may prevent you from using certain features of the Service.

10. Children's Privacy

The Service is not directed to, and is not intended for use by, individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take reasonable steps to delete such information promptly. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at privacy@brieflify.info so that we can take appropriate action.

11. International Data Transfers

Brieflify is operated from South Africa; however, your personal information may be transferred to, stored in, and processed in jurisdictions outside your country of residence. This includes transfers to:

  • Cloud infrastructure providers that host our Service in various regions worldwide.
  • Third-party AI providers whose processing infrastructure may be located in the United States, the European Union, or other jurisdictions.
  • Third-party service providers that assist with payment processing, analytics, and communications.

Where your data is transferred to a jurisdiction that does not offer an equivalent level of data protection to that of your country of residence, we take reasonable steps to ensure that appropriate safeguards are in place, including contractual protections consistent with applicable data protection legislation. By using the Service, you consent to the transfer of your information to jurisdictions outside your country of residence as described in this section.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last updated" date at the top of this page. If we make material changes that significantly affect how we handle your personal information, we will make reasonable efforts to notify you, such as by posting a prominent notice on the Service, sending an email to the address associated with your account, or through other appropriate communication channels.

Your continued use of the Service after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about our privacy practices.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy enquiries:privacy@brieflify.info

General support:support@brieflify.info

Website:brieflify.app

We aim to respond to all privacy-related enquiries within a reasonable timeframe, and in no event later than thirty (30) days from receipt of your request.

14. Governing Law

This Privacy Policy and any disputes arising out of or in connection with it shall be governed by and construed in accordance with the laws of the Republic of South Africa, including the Protection of Personal Information Act, 2013 (POPIA).

The Information Regulator of South Africa is the supervisory authority responsible for monitoring and enforcing compliance with POPIA. If you believe your rights under POPIA have been infringed, you may lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)

Website: inforegulator.org.za

Email: enquiries@inforegulator.org.za

For users located outside of South Africa, this policy is also designed to respect the data protection rights afforded to you by the applicable laws of your jurisdiction.

© 2026 Brieflify. All rights reserved.