Privacy Policy — Briefly

In short: Briefly is a private workspace for Claudius & Co. and its client companies. We do not collect personal data for marketing, profiling, advertising, or resale. We only hold the minimum information needed to run the service for accounts our administrators have created for you.

1. Who this applies to

Briefly ("the app") is an internal brief-management platform operated by Claudius & Co. ("we", "us"). It is used by our own staff and by the authorised client companies we work with. It is not a public product — there is no open sign-up for the general public.

2. How accounts are created

All user accounts on Briefly are provisioned centrally by Claudius & Co. administrators:

Internal staff accounts (admins, team leaders, team members) are created by a Claudius & Co. administrator.
Client company accounts are onboarded by a Claudius & Co. administrator, who creates the client owner and any initial members.
A client owner may subsequently add additional members of their own company, but only within the scope of their company.

Because accounts are centrally provisioned, we do not run open registration, capture data from visitors, or build user profiles from web activity. You will only have an account on Briefly if someone at Claudius & Co. or your own organisation created it for you.

3. What we store

To run the service, we store the minimum operational data listed below. Nothing here is shared with advertisers or third-party trackers.

Field	Purpose
name, surname	To address you in the app and in notifications.
email	Your login identifier and the destination for service-related emails (welcome, deadline alerts, status updates).
password	Stored only as a one-way `bcrypt` hash — never in plain text. We cannot recover it; you reset it.
role	Determines what you can see and do in the app (admin, team member, client owner, etc.).
company	Links client users to the company they belong to, so they only see their own company's work.
avatar (optional)	If you upload one, to show alongside your activity.
briefs, comments, documents	The actual work content you and your collaborators upload and exchange inside the app.
device token (mobile app)	Sent by the Briefly mobile app to deliver push notifications to your device. You can revoke it at any time by signing out.
audit trail	A record of actions taken in the app (e.g. "user X changed brief Y status") for accountability.

We do not collect: location data, marketing preferences, analytics or tracking cookies, social identifiers, advertising IDs, or personal data about anyone who does not have an account.

4. How we use your data

To authenticate you and authorise what you can see inside the app.
To deliver briefs, comments, files, and status updates between teams and clients.
To send notifications you have opted into by having an account — such as deadline reminders, status changes, and welcome emails.
To keep an audit trail so administrators can investigate issues.

We do not use your data to profile you, train AI models, sell to third parties, or send marketing communications.

5. Access and visibility

Client users can only see briefs, documents, and comments belonging to their own company.
Internal notes (marked as such) are hidden from all client users.
Administrators have full operational access in order to manage the service — this access is logged in the audit trail.

6. Data sharing

Briefly does not sell or share personal data. The only third parties involved are infrastructure providers we rely on to deliver the service:

Hosting — the servers that run the app.
Email delivery — the provider that sends transactional emails (welcome, deadline reminders, status updates).
Push notifications — Firebase Cloud Messaging, used to deliver push notifications to the mobile app when you are signed in.

These providers act as processors on our instructions, handle data only to the extent needed to deliver their service, and are not permitted to use it for their own purposes.

7. Security

All traffic between your browser or mobile app and Briefly is encrypted over HTTPS.
Passwords are stored as salted, one-way bcrypt hashes.
API access from the mobile app uses signed bearer tokens with a limited lifetime.
Role-based access control ensures users only see data scoped to them and their company.
All write actions are captured in an audit trail for accountability.

8. Retention

We retain your data for as long as your account is active. If your account is deleted by an administrator, your personal data is removed from the primary database; associated audit records may retain your name for accountability purposes. Uploaded documents associated with a deleted company or brief are removed from file storage as part of the deletion workflow.

9. Your rights

If you have an account on Briefly you can:

Access and update your profile (name, email, password, avatar) from inside the app.
Request correction or deletion of your account by contacting your administrator or Claudius & Co. directly.
Revoke mobile push notifications by signing out of the mobile app.

Depending on your jurisdiction, you may have additional statutory rights over the data we hold about you. We will honour valid requests in line with applicable law.

10. Cookies

The web app uses a strictly necessary session cookie to keep you signed in. We do not use advertising, analytics, or tracking cookies.

11. Changes to this policy

If we materially change how Briefly handles personal data, we will update this page and, where appropriate, notify active users through the app or by email. The date at the top of this page always reflects the latest revision.

12. Contact

For any privacy-related question or request, contact Claudius & Co. at protendai@gmail.com.