BriefHaven policies

Privacy policy

How BriefHaven collects, uses, protects and shares personal information when freelancers, teams and their clients use the service.

Effective 8 August 2026 · Last updated 8 August 2026

Information we process

We process account details, workspace and client contact details, request answers, comments, approval records, uploaded-file metadata, billing status, device and security logs, and support messages. Payment card details are handled by our merchant-of-record provider and are not stored by BriefHaven.

Why we use it

We use information to provide and secure the service, deliver requested emails, maintain client portals, process subscriptions, prevent abuse, troubleshoot problems and comply with legal obligations. Where applicable, processing is based on performance of a contract, legitimate interests, consent or legal obligation.

Service providers and transfers

BriefHaven uses vetted infrastructure providers, including Supabase for authentication and database services, Cloudflare for private file storage and delivery, Vercel for application hosting, Resend for transactional email, Lemon Squeezy for subscription commerce, and Transloadit for malware scanning and secure file transfer. Uploaded files are sent to Transloadit for this safety check before clean files are stored privately in Cloudflare R2. These providers process only the data needed for their function and may process it outside your country under contractual safeguards.

Workspace and client responsibilities

Workspace owners decide what they ask clients to submit and act as the controller of that client content. They must have a lawful reason to collect it and must not request unnecessary sensitive information. BriefHaven acts as a service provider or processor for that content.

Retention and deletion

We retain active workspace data while the account is in use. Cancelled or suspended workspaces may enter a documented retention period before deletion. Security, billing and approval records may be retained longer where required for fraud prevention, dispute resolution or law.

Security and your choices

We use tenant isolation, private object storage, revocable client links, short-lived download links, audit records and file quarantine. No system is perfectly secure. You may request access, correction, export, deletion or restriction where local law provides those rights.

Children and changes

The service is for business users aged 18 or older and is not directed to children. Material policy changes will be announced in the application or by email before they take effect where required.