Privacy Policy

This Privacy Policy explains how Briefed collects, uses, and protects your personal data when you use briefedlegalassistant.com and the associated service ("Briefed", the "Service"). Briefed is operated by Conor Murphy, trading as Briefed, who is the data controller for the purposes of UK GDPR and the Data Protection Act 2018. You can contact us about anything in this policy at support@briefedlegalassistant.com.

1. Data we collect

Account data. Your first name, email address, and password. Passwords are stored as a one-way bcrypt hash. We never store or can retrieve your plain-text password. If you sign in with Google, we store the Google account identifier and the verified email Google provides, and we never see your Google password.

Profile and onboarding data. The practice areas and firms you select, and your answers to the onboarding questionnaire, which we use to tailor recommendations. If you choose to upload or paste a CV during onboarding, it is read to extract structured signals (such as likely practice-area fit) which are then saved to your profile. The raw CV file or text itself is discarded immediately after analysis and is never stored.

Practice data. The answers you submit to practice questions, the AI-generated feedback and scores you receive, which Learn explainers and self-test questions you've completed, and usage counters (for example, questions attempted this month) that we use to apply free-tier limits.

Audio (optional feature). Where the spoken-answer recording feature is enabled, your recorded audio is sent to OpenAI to be transcribed to text and is not stored by us before or after transcription.

Payment data. Subscription payments are handled entirely by Stripe. We never receive or store your card details. We store your Stripe customer ID and subscription ID so we can recognise your subscription status.

Technical data. A strictly necessary session cookie that keeps you signed in, and standard server logs (such as IP address and request timestamps) used for security and debugging. We do not currently use advertising or analytics cookies or trackers.

2. How we use your data, and why

• To create and run your account, and to provide the Service you've asked for. Necessary to perform our contract with you.
• To generate AI feedback, scores, and onboarding recommendations. Necessary to perform our contract with you.
• To process subscription payments and manage billing. Necessary to perform our contract with you.
• To enforce free-tier usage limits and prevent abuse of the Service. Our legitimate interest in keeping the Service viable and secure.
• To respond to support requests and send essential account emails (such as password resets). Necessary to perform our contract with you, or a legal obligation where relevant.
• To fix bugs and improve the accuracy and quality of Briefed's content and features. Our legitimate interest in operating and improving the Service.

We do not use your data for advertising, and we do not sell your personal data to anyone.

3. Who we share it with

We use a small number of third-party processors to run Briefed, each of which only receives the data it needs to perform its function:

• Stripe: payment processing and subscription billing.
• Anthropic: powers the AI features (question feedback, model answers, Learn self-test questions, and CV-derived onboarding signals).
• OpenAI: transcribes recorded audio, only where that optional feature is enabled.
• Google: authenticates you if you choose "Continue with Google".
• Our email provider: sends password-reset and essential account emails.
• Our hosting provider (Railway): runs the servers and database that Briefed operates on.

We don't share your data with anyone else for their own marketing purposes, and we'll only disclose it beyond the above where required by law or to protect our rights or the security of the Service.

4. International transfers

Stripe, Anthropic, OpenAI, and Google are based in, or process data in, the United States. Where personal data is transferred outside the UK, we rely on the safeguards those providers offer, such as the UK's International Data Transfer Addendum or equivalent standard contractual clauses, to ensure your data continues to receive an appropriate level of protection.

5. How long we keep your data

We keep your account and practice data for as long as your account is active, so your progress and history remain available to you. If you ask us to delete your account (see Section 7), we will delete or anonymise your personal data within 30 days, except where we need to keep limited records for longer, for example payment records that Stripe retains as an independent controller for its own tax and regulatory obligations, typically around six years. As set out above, raw CV files and recorded audio are never stored in the first place.

6. Cookies

Briefed uses a single strictly necessary session cookie to keep you signed in. This cookie is required for the Service to work and isn't used for tracking or advertising. We don't currently use analytics or advertising cookies; if that changes, we'll update this policy and ask for your consent where the law requires it.

7. Your rights

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data or close your account;
• ask us to restrict or object to certain processing; and
• ask us for a portable copy of the data you've provided.

To exercise any of these rights, email support@briefedlegalassistant.com. If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

8. Children

Briefed is intended for users aged 16 and over, in line with our Terms of Service. We do not knowingly collect personal data from children below that age.

9. Security

We use reasonable technical and organisational measures to protect your data, including password hashing, encrypted connections (HTTPS), and secure session handling. No method of storage or transmission is completely secure, but we work to keep your data safe and to respond quickly if that's ever at risk.

10. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect a new feature or a change in the law. We'll update the effective date above, and where a change is material, we'll make reasonable efforts to let you know.

11. Contact

Questions about this policy or your data can be sent to support@briefedlegalassistant.com.