Legal

Privacy Policy

Last updated: 1 June 2026

1. Who we are

DEBRIEFD ("we", "us", "our") is an AI-powered feedback processing service operated by DEBRIEFD Ltd. Our registered address is available on request. You can reach us at hello@debriefd.xyz.

2. What data we collect

We collect the following categories of data when you use DEBRIEFD:

  • Account data: name, email address, and password (hashed) when you create an account.
  • Uploaded content: audio and video files, Loom URLs, or YouTube URLs you submit for processing.
  • Generated content: transcripts, task lists, briefs, and reply drafts we produce from your uploads.
  • Usage data: pages visited, features used, processing timestamps, and error logs for service improvement.
  • Billing data: payment information is collected and stored by Stripe. We never see or store full card numbers.

3. How we use your data

  • To provide and improve the DEBRIEFD service.
  • To transcribe and process your feedback recordings using third-party AI models (Deepgram for transcription, Anthropic Claude for analysis).
  • To send transactional emails (processing complete, billing receipts).
  • To detect and prevent abuse or fraud.
  • To comply with legal obligations.

4. We do not train AI on your data

Your uploaded files and generated outputs are never used to train, fine-tune, or improve any AI model — by us or any of our subprocessors. Your client conversations are private and stay that way.

5. Third-party subprocessors

We share data with the following subprocessors to deliver the service:

ProviderPurposeLocation
SupabaseDatabase & file storageUS / EU
DeepgramAudio transcriptionUS
AnthropicAI text analysisUS
StripePayment processingUS
ResendTransactional emailUS
VercelApplication hostingUS / EU
InngestBackground job processingUS

6. Data retention

We retain your uploaded files and generated outputs for as long as your account is active. If you delete a feedback session, its files and outputs are permanently deleted within 30 days. If you close your account, all data is deleted within 90 days.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at hello@debriefd.xyz. We will respond within 30 days.

8. Cookies

We use only essential cookies required to keep you logged in and to maintain session state. We do not use advertising or tracking cookies. No cookie consent banner is required for essential cookies under applicable law.

9. Security

We encrypt all data at rest and in transit. File storage uses Supabase's encrypted object storage. Access to production systems is restricted to authorised personnel via multi-factor authentication. We perform regular security reviews.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or via an in-app notice before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any privacy-related questions or requests, contact us at hello@debriefd.xyz.