Privacy Policy

Who we are

BriefMeBuild (“we”, “our”, “us”) is a web application that generates project briefs for developers and designers. We are operated as an independent product.

If you have questions about this policy, contact us at support@briefmebuild.com.

What we collect

Anonymous visitors. When you use BriefMeBuild without creating an account, we create an anonymous session for you. We store a session token in a browser cookie and save your quiz profile, generated briefs, and usage limits linked to that session. We do not collect your name or email address for anonymous sessions.

Registered users. When you create an account, we collect your name and email address. Your quiz profile, brief history, saved briefs, and subscription status are linked to your account. Passwords are stored in hashed form; we never store plain-text passwords.

If you sign up after using an anonymous session, we migrate your existing quiz data and brief history to your new account and remove the anonymous user record.

Session and security data. For signed-in users, we may store your IP address and browser user agent with your session to operate authentication and help protect the service. In production, we also use IP-based rate limiting to reduce abuse; limited rate-limit records may be stored in our database.

Payment and billing data. If you subscribe to Premium, payment is processed by Stripe. We do not store your full card details. We store subscription status, plan information, and a Stripe customer identifier so we can manage billing. Invoice and receipt details may be retrieved from Stripe when you view billing history in the dashboard.

Email communications. If you register, we send transactional emails related to your account, such as email verification, password reset, payment receipts, and account-deletion confirmation. We do not send marketing newsletters at this time.

Usage data. On our production site we use Plausible Analytics, a privacy-friendly analytics service that does not use cookies or cross-site tracking. Page views are collected in aggregate through a first-party proxy on our domain. We do not use advertising trackers. Our hosting provider may retain standard server logs (IP address, user agent, request path) as part of operating the service. See Plausible's data policy for how they handle analytics data.

How we use your data

We use the information we collect to:

• Provide and improve the service, including generating briefs tailored to your quiz answers
• Maintain your brief history, saved briefs, and profile settings
• Authenticate you, manage sessions, and enforce usage limits
• Process Premium subscriptions and send related transactional emails
• Verify your email address before unlocking Premium features
• Protect the service against abuse and unauthorized access
• Measure aggregate site usage through privacy-friendly analytics

We do not sell your data to third parties and do not use it for advertising.

Cookies and browser storage

Cookies. We use cookies that are strictly necessary to operate the service:

• Session cookie — maintains your login state (anonymous or registered). Sessions expire after 30 days; activity can extend the expiry on a rolling basis.
• Sidebar preference cookie — remembers whether the dashboard sidebar is open or collapsed (expires after 7 days).

We do not use tracking cookies or third-party advertising cookies.

Local storage. Your browser may store preferences locally, including color mode, visual theme style, and a temporary copy of quiz answers used to restore onboarding progress. This data stays on your device unless you complete onboarding or sign in, at which point relevant profile data is saved to your account on our servers.

Data retention

Anonymous session data (quiz profile, brief history) is retained for as long as the session is active. If you clear your browser cookies or local storage, we may be unable to recover or delete your anonymous data on request because we cannot verify your identity without an account.

Registered account data is retained for as long as your account exists. You can delete your account from Settings in the dashboard. Deleting your account cancels active subscriptions, removes your app data (including briefs and quiz profile), and triggers a confirmation email. You can also email us to request deletion or assistance.

Transactional email and payment records held by our providers may be retained according to their policies and applicable law, even after your account is deleted.

Third-party services

We use the following third-party services to operate BriefMeBuild. Each may process data according to its own privacy policy:

• OpenAI— generates brief content. Your quiz answers and related context are sent to OpenAI's API when you generate a brief.
• Stripe— processes Premium subscription payments, stores payment methods, and provides billing history.
• Resend— delivers transactional email (verification, password reset, receipts, account deletion).
• Vercel / hosting provider — serves the application and hosts our database. Standard web server logs may be retained.

Data may be processed in the United States or other countries where these providers operate.

Your rights

If you are a registered user, you may request a copy of the data we hold about you, update your profile, or delete your account from Settings. You can also email support@briefmebuild.com for help. We will respond within 30 days.

If you are located in the EU or UK, you have additional rights under GDPR / UK GDPR, including the right to object to processing and the right to data portability. Contact us to exercise these rights.

Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of BriefMeBuild after changes are posted constitutes your acceptance of the revised policy.