Breefly Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

1.2 Information Collected Automatically

1.3 Information from Video Content

When you process videos, we collect:

• Video files or URLs
• Metadata (duration, format, resolution, title, thumbnail)
• Auto-generated audio transcripts
• AI-generated chapters, notes, and flashcards
• Processing settings and custom instructions

We do NOT analyze video content for marketing or advertising purposes. Processing is solely to provide your requested service.

1.4 Information from Third Parties

• Authentication Providers (Google): Name, email, profile photo, account ID
• Payment Processors (Stripe): Transaction confirmations and status updates
• Analytics Providers: Aggregated usage statistics and performance metrics

2. Chrome Browser Extension

The Breefly Chrome Extension enhances your experience by enabling video processing directly from YouTube and educational platforms like Canvas.

2.1 Data Collected by the Extension

2.2 Extension Permissions Explained

2.3 Data Transmission

When you process a video through the extension:

• Video URL and/or transcript is sent to our servers over encrypted HTTPS
• For Canvas videos: your authentication cookies are included to access the video
• All processing occurs on our secure servers
• Results are returned to the extension and cached locally

2.4 What the Extension Does NOT Do

• Does NOT track your general browsing history
• Does NOT record keystrokes or mouse movements
• Does NOT access emails, files, or other personal data
• Does NOT run any remote code - all code is bundled locally
• Does NOT share data with advertisers

3. How We Collect Information

• Directly from you: When you create an account, upload content, process videos, or contact support
• Automatically: Through cookies, server logs, analytics tools, and the browser extension
• From third-party integrations: Google OAuth, payment processors, and analytics services

4. How We Use Your Information

4.1 Provide and Improve the Service

• Process, transcribe, summarize, and store videos
• Generate AI-powered chapters, notes, and flashcards
• Manage your account and authenticate logins
• Process payments and subscriptions
• Analyze usage patterns to improve features and performance
• Enforce usage quotas and prevent abuse

4.2 Communications

• Account verification and security alerts
• Service updates and important notifications
• Responses to support inquiries
• Optional marketing emails (you may unsubscribe anytime)

4.3 Safety, Security & Legal Compliance

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations and respond to lawful requests

4.4 Analytics & Research

• Internal performance analysis and usage trend monitoring
• Generate anonymized, aggregated statistics
• Improve AI model accuracy and processing quality

5. How We Share Your Information

We do not sell or trade your personal data.

We may share information with:

• Service Providers: Cloud hosting (AWS), analytics, and infrastructure vendors under strict data protection agreements
• AI Processing Partners:
  • AssemblyAI - Audio transcription services
  • OpenAI - AI-powered chapter generation, notes, and flashcards
  • Google Cloud (Gemini) - Alternative AI processing
• Analytics & Monitoring:
  • PostHog - Usage analytics and product insights
  • Sentry - Error monitoring and diagnostics
• Payment Processors: Stripe for billing and subscription management
• Legal Requests: Courts, law enforcement, or regulators as required by applicable law
• Business Transfers: Successors in mergers, acquisitions, or asset sales (with advance notice to users)
• With Your Consent: When you explicitly authorize integrations or sharing

Aggregated or anonymized data (which cannot identify you) may be shared for analytics, research, or benchmarking purposes.

6. Data Retention

• Account data: Retained while your account is active; deleted within 90 days of account closure
• Processed videos: Retained until you delete them or close your account
• Cached extension data: Automatically deleted after 24 hours
• Deleted content: Removed from active systems within 30 days; from backups within 90 days
• Aggregated analytics: May be retained indefinitely (non-identifiable)
• Legal holds: Extended retention only if required by law, ongoing disputes, or regulatory requirements

7. Data Security

We employ industry-standard security measures:

• Encryption in transit: TLS 1.2+ for all data transmission
• Encryption at rest: AES-256 for sensitive stored data
• Password security: Bcrypt hashing with salt
• Access controls: Role-based access and principle of least privilege
• Authentication: JWT tokens with secure expiration
• Infrastructure: AWS with SOC 2 compliance; regular security audits
• Incident response: Documented procedures for security event handling

No system is perfectly secure. If a data breach affecting your personal information occurs, we will notify you as required by applicable law.

8. Your Privacy Rights and Choices

8.1 Access and Portability

Access and download your data through account settings or by emailing support@breefly.org.

8.2 Correction

Update your account information in settings or contact us to correct inaccuracies.

8.3 Deletion

• Delete individual videos or your entire account through settings
• Request complete data deletion by emailing support@breefly.org
• Extension data can be cleared by removing the extension or clearing browser data

8.4 Opt-Out Options

• Unsubscribe from marketing emails via the link in any email
• Disable analytics cookies through your browser settings
• Disable or remove the Chrome extension at any time

8.5 Region-Specific Rights

• California Residents (CCPA/CPRA): Right to know, delete, and opt-out. We do not sell personal data.
• Other Jurisdictions: We honor reasonable privacy requests regardless of location.

Privacy requests are typically processed within 30 days (45 days for complex requests).

9. Children's Privacy

• The Service is not intended for users under 13 years of age
• We do not knowingly collect personal information from children under 13
• If we discover we have collected data from a child under 13, we will delete it immediately
• Users aged 13-18 should have parental consent and supervision when using the Service

10. International Data Transfers

• Primary storage: United States (AWS us-west-2 region)
• Data processing: May occur in the United States where our servers and AI providers are located
• We maintain appropriate safeguards to ensure your data receives adequate protection regardless of location

11. Third-Party Services

The Service integrates with or links to external platforms:

• YouTube: Video content access and metadata
• Canvas (Instructure): Educational video platform integration
• Kaltura: Video hosting used by educational institutions
• Google: Authentication services

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before use.

12. Cookies and Tracking Technologies

We use:

• Essential cookies: Authentication, session management, security
• Functional cookies: User preferences and settings
• Analytics cookies: Usage patterns and performance monitoring (PostHog, Sentry)

You may disable cookies in your browser, but core functionality may be affected.

The extension stores data via Chrome's storage API, manageable through browser settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

• Minor changes: Effective immediately upon posting
• Material changes: 30-day advance notice via email or prominent website banner

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us