Privacy Policy

Briefly is an AI-powered creative planning platform operated by Ryley Burridge, a UK-based sole trader trading as Briefly.

For personal information processed under our responsibility, Ryley Burridge is the data controller.

Privacy contact: contact@xzecreative.com

This Privacy Policy explains how personal information is handled when you use Briefly.

Depending on your use of Briefly, we may process the following categories of information.

Account information

• Email address.
• Account identifiers.
• Authentication and session information.
• Subscription and account status.

Project information

• Submitted website URLs.
• Product descriptions.
• Creative briefs and marketing instructions.
• Uploaded logos, screenshots and brand assets.
• Generated scripts, hooks, storyboard images and production plans.

Billing information

• Subscription identifiers.
• Payment status.
• Billing and transaction references.
• Information necessary to manage subscription entitlements.

Payments are processed through Stripe.

Briefly does not intentionally collect or store complete payment-card numbers in its own application database.

Technical information

• IP addresses.
• Device and browser information.
• Access logs.
• Error records.
• Information necessary to maintain service security and reliability.

Support information

• Messages sent to customer support.
• Information provided when reporting an issue or requesting assistance.

We process information to:

• Create and maintain customer accounts.
• Authenticate users.
• Analyse submitted product information.
• Generate scripts, concepts and storyboards.
• Store and retrieve customer projects.
• Manage subscriptions and generation allowances.
• Respond to support enquiries.
• Detect fraud, abuse and security threats.
• Diagnose technical problems.
• Meet applicable legal obligations.

Where the UK GDPR applies, we rely on appropriate lawful bases depending on the processing activity.

Contractual necessity

Providing account access, requested generation services and subscription functionality where the processing is necessary for our contract with the individual.

Legitimate interests

Maintaining security, preventing abuse and improving operational reliability where those interests are not overridden by individuals' rights.

Legal obligations

Complying with applicable accounting, tax and other legal requirements.

Consent

Where required for optional tracking technologies, direct marketing or other specific activities.

The lawful basis applicable to a particular activity depends on the circumstances, including whether the information relates to an individual customer or another person.

Briefly uses third-party AI services to analyse submitted information and generate creative outputs.

Depending on the generation request, information sent for processing may include:

• Website content.
• Product descriptions.
• Marketing briefs.
• Uploaded screenshots.
• Brand assets.
• Other relevant project instructions.

This processing is necessary to provide the AI-generation features requested by customers.

Important

Do not upload personal, confidential or sensitive information unless you are authorised to disclose it and its processing is appropriate for the requested service.

Briefly cannot guarantee that AI-generated outputs will accurately reproduce submitted information.

Briefly uses external providers to operate its services.

These currently include:

• Supabase: Authentication, database and storage functionality.
• Stripe: Payment processing and subscription billing.
• Lovable and associated infrastructure: Application infrastructure and AI service integration.
• Google Gemini through the Lovable AI Gateway: AI generation, including storyboard imagery.

Provider arrangements may change as the service develops.

Some providers may act as processors on our behalf, while others may act as independent controllers for particular activities.

Some service providers may process or access personal information outside the United Kingdom.

Where international transfers are subject to UK data protection restrictions, appropriate transfer mechanisms must be established.

These may include applicable adequacy regulations or approved contractual safeguards, depending on the destination and provider arrangements.

We retain information only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable legal requirements.

The retention period depends on the category of information and the purpose of processing.

Account and project information

Generally retained while required to provide the account and associated project functionality.

Billing information

Retained for periods required by applicable tax, accounting and legal obligations.

Security and technical records

Retained for periods appropriate to security monitoring, troubleshooting and legal requirements.

Support communications

Retained for as long as reasonably necessary to handle enquiries and related obligations.

Where information is no longer required, it will be deleted or anonymised in accordance with applicable requirements.

You may request deletion of your account or personal information by contacting:

contact@xzecreative.com

We will assess and respond to requests in accordance with applicable data protection law.

Deletion may be subject to lawful retention requirements, including relevant financial records.

Some information may remain temporarily in backups or third-party systems in accordance with verified retention arrangements and applicable law.

Subject to applicable law, you may have the right to:

• Access personal information held about you.
• Request correction of inaccurate information.
• Request erasure.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.

Requests can be submitted to:

contact@xzecreative.com

We may need to verify your identity before fulfilling a request.

You may also complain to the UK's Information Commissioner's Office.

Briefly uses cookies or similar browser storage where necessary for account authentication, session management and essential application functionality.

Non-essential analytics, advertising or tracking technologies will be subject to applicable notice and consent requirements.

We use reasonable technical and organisational measures intended to protect information against unauthorised access, disclosure, alteration and loss.

These may include authentication controls, restricted database access and appropriate storage permissions.

No online service can guarantee absolute security.

We will handle security incidents and personal data breaches in accordance with applicable legal obligations.

Briefly is intended for users aged 18 and over.

We do not knowingly offer accounts to children.

If you believe a child has provided personal information through Briefly, please contact us.

We may update this Privacy Policy to reflect changes in our services, technology providers or legal obligations.

Material changes will be communicated where required by applicable law.

The latest version will be available through Briefly.

Briefly

Data controller: Ryley Burridge

Trading as: Briefly

Email: contact@xzecreative.com