Privacy Policy

1. Introduction

Briify ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Full name
• Password (encrypted)
• Profile information (optional avatar, bio)

2.2 Usage Data

We automatically collect information about how you use the Service:

• Search queries and search history
• Videos watched and watch history
• Courses created and bookmarks saved
• Learning progress and analytics
• Device information (browser type, operating system)
• IP address and general location
• Session duration and interaction patterns

2.3 YouTube Data

We DO collect and store:

• Video metadata (title, description, duration, channel name)
• Video transcripts from YouTube's official Transcript API
• Video IDs and timestamps for bookmarks and courses

Transcript Caching Policy: Per YouTube's API Terms of Service, we cache video transcripts for a maximum of 30 days. After 30 days, transcripts are automatically deleted and must be re-fetched if needed.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your AI-powered video segmentation requests
• Personalize your learning experience
• Send you important notifications (OTP codes, password resets, weekly reports)
• Analyze usage patterns to improve the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Provide customer support

4. Third-Party Services

We integrate with the following third-party services:

4.1 YouTube

• We use YouTube's official embed player to display videos
• We use YouTube Data API v3 to fetch video metadata
• We use YouTube Transcript API to fetch captions
• YouTube's Privacy Policy: https://policies.google.com/privacy

4.2 Anthropic Claude

• We use Claude AI to analyze video transcripts and generate segments
• We send video transcripts (text only, no video/audio) to Claude for processing
• Anthropic's Privacy Policy: https://www.anthropic.com/privacy

4.3 Google OAuth

• We use Google OAuth for authentication (optional)
• We receive your email and basic profile information from Google
• We do not access your Google Drive, Gmail, or other Google services

4.4 Payment Processors

• We use Stripe for payment processing (when subscriptions are active)
• We do not store your credit card information
• Payment data is handled directly by Stripe according to PCI-DSS standards

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share your information only in these cases:

• With your consent: When you explicitly authorize us to share data
• Service providers: Third-party services that help us operate (hosting, analytics, email delivery)
• Legal requirements: When required by law, court order, or government request
• Business transfers: In case of merger, acquisition, or sale of assets
• Safety and security: To protect rights, property, or safety of Briify, users, or the public

6. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt
• HTTPS encryption for all data transmission
• Secure database with access controls
• Regular security audits and updates
• OTP-based two-factor authentication for sensitive operations

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights (GDPR & CCPA Compliance)

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format (JSON)
• Opt-out: Unsubscribe from marketing emails
• Restriction: Limit how we process your data
• Objection: Object to certain data processing activities

To exercise these rights, visit your Profile Settings or contact us at privacy@briify.com

8. Data Retention

• Account data: Retained until you delete your account
• Transcripts: Automatically deleted after 30 days (YouTube TOS requirement)
• Usage logs: Retained for 90 days for security and analytics
• Backup data: May be retained for up to 30 days after deletion
• Legal data: Retained as required by law (e.g., tax records for 7 years)

9. Cookies and Tracking

9.1 Cookies We Use

9.2 Authentication Cookie

We use a single HttpOnly cookie for authentication:

• Name: auth_token
• Purpose: Keep you logged in and secure your session
• Duration: 7 days (or until you log out)
• Type: HttpOnly, Secure, SameSite
• Data stored: Encrypted session identifier only

9.3 Session Management

We track active login sessions to:

• Limit concurrent sessions to 3 devices for security
• Send you login notifications with device and location information
• Allow you to manage and revoke active sessions
• Detect suspicious login attempts

Session data includes: device type, browser, IP address, and approximate location.

9.4 What We Don't Use

We do NOT use:

• ❌ Advertising cookies
• ❌ Marketing cookies
• ❌ Social media tracking cookies
• ❌ Third-party analytics cookies (Google Analytics, etc.)
• ❌ Cross-site tracking

9.5 Browser Controls

You can control cookies through your browser settings. However, disabling the authentication cookie will prevent you from logging in and using the Service.

10. Children's Privacy

Briify is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last Updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: