PRIVACY POLICY

Briefance ("we", "us", "our") operates the platform at https://briefance.com. We provide an AI-powered tool that helps freelancers and agencies convert client requests into professional project briefs and proposals.

For questions about this policy, contact us at info@thecodevolt.com.

We collect the following categories of personal data:

• Account data: name, email address, and authentication credentials when you register.
• Profile data: business name, hourly rate, currency, and expertise you provide in settings.
• Content data: client messages, briefs, proposals, and related project information you create.
• Usage data: AI token usage, feature usage analytics, and interaction patterns.
• Technical data: IP address, browser type, device info, and cookies via our analytics provider (Microsoft Clarity).
• Payment data: processed by LemonSqueezy; we store only your customer ID, not payment card details.

• Provide and maintain the Briefance service, including AI-powered brief and proposal generation.
• Process your subscription and manage billing through LemonSqueezy.
• Send transactional emails (welcome, brief ready notifications) via Resend.
• Analyze usage to improve our product (anonymized analytics via Microsoft Clarity).
• Enforce usage limits based on your subscription plan.
• Respond to support requests and communicate service updates.

• Contract: processing necessary to provide the service you signed up for.
• Legitimate interest: product analytics, fraud prevention, and service improvements.
• Consent: non-essential cookies and marketing communications (you can withdraw at any time).

Briefance is an AI-powered service. When you submit a client message, upload a file, or request a brief or proposal, the relevant content (including any personal data contained in it) is transmitted to Anthropic, PBC (United States) for processing by the Claude family of large language models. This processing is essential to providing the service you signed up for.

Legal basis (KVKK & GDPR): performance of the contract between you and Briefance. Before you submit content for the first time, we ask for your explicit acknowledgement that it will be processed by a U.S.-based AI sub-processor.

About this AI processing:

• Used solely to generate briefs, questions, and proposals for your account.
• Not used to train AI models. Anthropic's commercial API does not train on customer inputs or outputs (see Anthropic's Commercial Terms & Privacy Policy).
• Transmitted over encrypted connections (TLS 1.2+).
• Retained by Anthropic for up to 30 days for abuse monitoring, then deleted.
• Cross-border transfer to the United States is covered by Standard Contractual Clauses (SCCs) and Anthropic's Data Processing Addendum.

AI output is advisory. Briefs and proposals produced by Briefance are drafts generated by a language model. You are responsible for reviewing, editing, and validating every output before sharing it with a client. Briefance does not warrant the accuracy, completeness, or fitness for purpose of AI-generated content.

Do not submit special categories of data. Please avoid uploading content that includes health data, biometric data, political opinions, or other special-category personal data under GDPR Art. 9 / KVKK Art. 6. The service is not configured to process these categories.

We rely on a small set of sub-processors to operate the service. A live list with roles, data categories, and processing locations is published at /subprocessors.

• Supabase (EU): managed Postgres, authentication, file storage.
• Anthropic (US): AI processing of client messages, briefs, proposals.
• Vercel (US/EU): application hosting and edge delivery.
• Upstash (EU): rate-limiting counters (no PII).
• LemonSqueezy (US): Merchant-of-Record payment processing and tax.
• Resend (EU): transactional email delivery.
• Sentry (EU): error monitoring (PII scrubbed before send).
• Microsoft Clarity (US): product analytics, only with your consent.

We do not sell your personal data. We will notify users of any material sub-processor change at least 15 days in advance.

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

Under GDPR and KVKK, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data via your settings page.
• Erasure: delete your account and associated data.
• Portability: export your briefs and proposals.
• Restriction: limit how we process your data.
• Object: opt out of analytics tracking via cookie preferences.
• Withdraw consent: at any time for consent-based processing.

You can delete your account and all personal data directly from Settings → Account → Delete account. For any other right, including a full data export or a KVKK başvuru under Article 11, email info@thecodevolt.com. We respond within 30 days.

We use the following cookies:

• Essential: authentication session cookies (Supabase). Required for the service to function.
• Analytics: Microsoft Clarity cookies for product usage analytics. Only set with your consent.

You can manage cookie preferences via the cookie banner or your browser settings.

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure authentication via Supabase, row-level security on all database tables, and security headers (CSP, X-Frame-Options, etc.).

Your data may be processed in the United States and European Union. Where data is transferred outside the EEA, we ensure adequate safeguards are in place through Standard Contractual Clauses or adequacy decisions.

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of the service after changes constitutes acceptance.