Privacy Policy
1. What we collect
Email address — collected when you sign up, used to send you magic links for authentication. We do not send marketing email.
Podcast RSS URLs — the feeds you add to your BriefCast account. Used to fetch and process episodes on your behalf.
Session data — a session cookie is stored in your browser to keep you signed in. It contains a random token; no personal data is stored in the cookie itself.
Usage data — basic server logs (IP address, request timestamps) retained for up to 30 days for debugging and security purposes.
2. What we do not collect
We do not collect your name, phone number, or payment details directly. Payment is handled by Stripe; we only store your subscription tier. We do not sell, rent, or share your data with third parties for advertising.
3. How we use your data
- Sending you magic links to sign in (via AWS SES)
- Fetching and processing podcast episodes you've subscribed to
- Generating AI summaries (using AWS Bedrock / Anthropic Claude)
- Converting summaries to audio (using AWS Polly)
- Delivering your private RSS feed
4. Third-party services
BriefCast runs on Amazon Web Services (AWS). Your data may be processed by the following AWS services: SES (email delivery), RDS (database), S3 (audio and transcript storage), Polly (text-to-speech), Bedrock (AI summarization). AWS is our sole infrastructure provider. We do not use third-party analytics or advertising SDKs.
5. Data retention
Your account data is retained for as long as your account is active. Episode summaries and audio files are retained for 90 days after generation. You may request deletion of your account and all associated data by emailing support@briefcast.gydd.com.
6. Cookies
We use a single session cookie (briefcast_session) to keep you signed in. It is set with HttpOnly, Secure, and SameSite=Lax flags. No tracking or advertising cookies are used.
7. Your rights
You may request access to, correction of, or deletion of your personal data at any time. Email support@briefcast.gydd.com. We will respond within 30 days.
8. Children
BriefCast is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email. Continued use of the service constitutes acceptance.