Privacy policy

01Who we are

Briott is a service operated by [legal entity to be confirmed], located at [address to be confirmed]. We are the controller of your account data. For your business content and data, we act on your behalf and follow your instructions.

For any privacy question, email us at hola@briott.app.

02What data we process

• Your account: email, your name if you give it to us, language and time zone.
• Your business: name, industry, city, goals, tone of voice, colors, logo and anything you tell us never to say.
• Your website: the public content of the pages you point us to (text, images, products, colors) and screenshots.
• Your website's or app's members-only area, only if you turn it on: you sign in yourself in a secure browser. We keep the encrypted session and screen recordings, never your password.
• Material you upload: photos, videos and documents.
• Connected social accounts: when you connect Instagram, Facebook, TikTok or X through their official sign-in, we receive the account ID, its public name, the permissions you granted and an access token, which we store encrypted. We never see or store your password.
• Generated content: captions, images, carousels, videos, their versions and your feedback on them.
• Metrics: reach, views, engagement and followers for what we publish, read from the official APIs.
• Billing: plan, payments and invoices. Your card details are processed by Stripe; we never see them.
• Your help reports: what you write to us, the screenshots you attach, the page you write from, the state of your account at that moment (plan, credits and recent failures) and, unless you turn it off when sending, technical data (your browser and screen size, your last steps in the app and the error codes you saw), to understand and fix what happened. If you delete your account, your reports stay without your email or that technical data; if you want them fully deleted, just ask.
• Technical data: IP address, browser and security logs, to protect your account and the service.

03What we use it for

• Understanding your business and creating your strategy and content.
• Publishing on your accounts what you approve, or what your chosen approval mode allows.
• Measuring results and learning from your feedback to improve the next posts.
• Billing your plan, supporting you and sending you account notices.
• Protecting the service from abuse and complying with the law.

We don't sell your data or use it for advertising.

04AI and other providers

To create your content, we send AI providers the business information they need, such as text from your website or product photos. They act as processors: they handle the data on our behalf and only to provide their service to us.

Planned providers:

• Text and strategy: Anthropic.
• Images and video: fal.ai.
• Voice: ElevenLabs.
• Infrastructure and database: Supabase, Vercel and Fly.io.
• Secure browser for members-only areas: Browserbase.
• Payments: Stripe. Email: Resend.

We require them not to use your data to train their models [to be confirmed by contract with each provider]. If this list changes, we'll update it here.

05Your social accounts

We connect your accounts only through each platform's official APIs. We ask only for the permissions needed to publish and read metrics, and explain each one before you connect.

You can disconnect a network from Briott or from the network's own settings. If you disconnect it in Briott, or remove our app from Facebook, Instagram or TikTok (the platform tells us), we stop publishing there and delete the access token right away.

X doesn't tell us: if you remove access from X, the token stops working, we stop publishing there and ask you to reconnect. To have us delete the token too, disconnect it in Briott.

Data we receive from each platform is also governed by that platform's own policies (Meta, TikTok and X).

06How long we keep it

• For as long as your account is active.
• If you delete your account, we delete your account and the data of the brands only you use right away; your files and saved sessions over the following days, and backups within the following 30 days [backup timeline to be confirmed]. What the work done for you cost us with our providers (AI tokens and amounts) stays in our books, with nothing that identifies you.
• Invoices and payment records are kept for as long as the law requires.
• Security logs are kept for up to 90 days [to be confirmed].

07Your rights

You can ask to access, correct, export or delete your data, or object to a specific use. In Settings → Account you download your data or delete your account, and you correct your business details in the app; for anything else, email us at hola@briott.app. We reply within 30 days at most.

The steps to delete everything are on Data deletion.

08Cookies

We only use essential cookies: one to keep you signed in and one to remember your language. We don't use analytics or advertising cookies, which is why you don't see a cookie banner.

To understand how Briott is used, we measure visits ourselves, without cookies, without storing anything on your device and without third parties: which pages are viewed, the approximate country and city, and the type of device. We don't keep your IP address, and a visitor without an account can't be followed from one day to the next. If you have an account, your use is linked to it to improve the product and to help you when you write to us. This data is deleted after 13 months.

09Where your data is stored

Our providers may process data outside your country, for example in the United States. When they do, we rely on appropriate contractual safeguards [pending review for the countries where we operate].

10Security

We encrypt data in transit and access tokens at rest, keep each organization's data separate and limit which team members can access it. If an incident affects your data, we'll tell you.

11Minors

Briott is built for businesses and is not intended for anyone under 18.

12Changes to this policy

If we make significant changes, we'll email you before they take effect.