Privacy Policy
Last updated: September 5, 2026
1. Introduction and Scope
This Privacy Policy explains how Breve collects, uses, stores, and protects your personal information when you use our website, applications, and related services. By creating an account, submitting a topic, or otherwise interacting with Breve, you acknowledge that you have read and understood this policy. We are committed to transparency and to handling your data responsibly.
2. Information We Collect
We collect the information you choose to provide, as well as technical and usage data generated automatically when you use the service. Account information includes your email address, authentication credentials, and any profile details you add. Usage information includes the topics you search, the briefings you generate, the sources you interact with, and your saved preferences. We also collect device and browser metadata, such as your operating system, browser type, language settings, and approximate location, to help us optimize performance and troubleshoot issues.
When you contact customer support or respond to surveys, we retain those communications and any attachments so that we can resolve your request and improve our support processes.
3. How We Use Your Information
We use your information to operate and improve Breve. This includes generating the briefings you request, personalizing your experience, maintaining your account, processing payments through Razorpay, and communicating service updates. We also use aggregated usage data to understand which topics and features are most valuable, to diagnose technical problems, and to prioritize product improvements. Your email address is used for account verification, password resets, billing receipts, and occasional product announcements.
4. Data Protection and Security Measures
We take the security of your data seriously and have implemented a multi-layered security program designed to protect your information against unauthorized access, alteration, disclosure, or destruction.
4.1 Encryption in Transit and at Rest
All data transmitted between your device and our servers is protected by Transport Layer Security (TLS) encryption. Authentication tokens, session cookies, and API requests are sent over encrypted channels. Data stored in our backend is encrypted at rest using industry-standard encryption algorithms managed by our cloud infrastructure providers.
4.2 Authentication and Access Controls
Access to Breve is gated through secure authentication provided by our cloud infrastructure. We enforce strong session management, automatic token rotation, and password-protected accounts. Internal access to production systems is limited to authorized personnel and protected by role-based permissions and multi-factor authentication.
4.3 Database Security and Row-Level Security
Your briefing history, saved preferences, and account records are stored in a managed relational database with Row-Level Security (RLS) policies. These policies ensure that each user can only read or modify their own data, and they are enforced directly at the database layer. Privileged administrative operations are performed only through audited, restricted channels.
4.4 Infrastructure Hardening and Monitoring
Our backend runs on modern serverless infrastructure with built-in DDoS protection, automated security patching, and continuous monitoring. We maintain audit logs for authentication events, administrative actions, and infrastructure changes. Anomalous activity is flagged for review by our operations team.
4.5 Third-Party AI and Search Services
When generating briefings, we send your topic query to trusted AI and web-search partners. We do not include unnecessary personal identifiers in these requests, and we configure our integrations to process data only for the purpose of returning relevant results. We review the security and data-processing practices of these providers before integration and continue to monitor them on an ongoing basis.
4.6 Incident Response and Breach Notification
We maintain an incident response plan that defines how we detect, contain, investigate, and recover from security incidents. If we become aware of a data breach that affects your personal information, we will notify affected users and relevant regulators in accordance with applicable legal requirements.
5. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal information. We share data only with service providers that are essential to operating Breve, such as cloud hosting, authentication, payment processing, analytics, and AI inference services. Each provider is contractually bound to use your data solely for the services they provide to us and to maintain appropriate confidentiality and security safeguards.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the service. If you delete your account, we will remove or anonymize your personal data within a reasonable period, unless we are required to retain it by law or for legitimate business purposes such as fraud prevention, security, or dispute resolution. Usage logs and aggregated analytics may be retained in de-identified form for longer periods.
7. International Data Transfers
Your data may be processed and stored on servers located outside your country of residence. When we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or equivalent legal mechanisms to ensure that your information remains protected in accordance with this policy.
8. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information. You may also have the right to data portability and to withdraw consent where processing is based on consent. You can update or delete much of your information directly in your account settings. For requests that cannot be fulfilled through the application, please contact us using the details below and we will respond within the timeframe required by applicable law.
9. Children's Privacy
Breve is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal data, please contact us immediately and we will take steps to delete that information.
10. Automated Decision-Making
Breve uses machine learning models to generate summaries and recommendations based on the topics you provide. These outputs are informational and do not constitute legal, financial, medical, or other professional advice. No automated decision is made that produces legal or similarly significant effects on you.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you through the service or by email before the changes take effect. Your continued use of Breve after the effective date constitutes acceptance of the revised policy.
12. Contact
If you have questions about this Privacy Policy, our data protection practices, or how to exercise your rights, please contact us at brevechatcustomersupport@gmail.com.