Privacy Policy
1. Who We Are
IntelBrief (“we”, “our”, “us”) is a competitive intelligence service published by Grégoire Vienne, entrepreneur individuel (see the Legal notice). We are the data controller for personal data processed under this policy. You can reach us at hello@intelbrief.xyz.
2. Data We Collect
Account data: Email address, password (hashed) or Google sign-in identifier, name, and company information you provide when signing up.
Usage data: Accounts (companies) you add for monitoring, settings you configure, briefs generated, and features used.
Billing data: Billing is handled by Stripe. We store only your Stripe customer ID and subscription status — no card numbers or full billing details.
Technical data: IP address, browser type, and operating system, processed for security. Session tokens for authentication.
Communications: If you email us, we keep those communications to respond and improve support.
3. How We Use Your Data
- Service delivery: Scanning the public sources of the companies you track, generating your weekly brief and sending it by email.
- Account management: Authentication, billing, password resets, and account notifications.
- Product improvement: Aggregate, cookieless page-view statistics (no individual tracking) to understand which pages are useful.
- Security: Detecting and preventing fraud, abuse, and unauthorized access.
- Legal compliance: Meeting obligations under applicable law.
4. Legal Basis (GDPR)
For users in the EU/EEA, we process personal data under the following legal bases:
- Contract performance: Processing necessary to provide the service you signed up for.
- Legitimate interests: Security monitoring, fraud prevention, and aggregate analytics.
- Consent: Marketing emails (you can withdraw at any time via the unsubscribe link).
- Legal obligation: Where required by law.
5. Email Communications
We send you transactional emails (account security, billing) and the weekly brief. We do not send separate alert emails. Every brief includes an unsubscribe link, and you can turn weekly brief emails on or off from Settings in the app. You can also email us at hello@intelbrief.xyz to stop all non-essential emails.
6. Service Providers (Sub-processors)
We do not sell your personal data. We share data only with the following service providers, each bound by its own data processing terms:
- Vercel Inc. (USA): Application hosting — processes every request, and provides our cookieless, aggregate page-view analytics (Vercel Web Analytics).
- Neon Inc. (USA): PostgreSQL database hosting — stores account and service data.
- Resend (USA): Email delivery — receives your email address to deliver the weekly brief and account emails.
- Stripe (USA/Ireland): Payment processing — handles billing under its own privacy policy.
- Google (USA/Ireland): Optional “Sign in with Google” — if you use it, Google shares your name, email address and profile picture with us.
- OpenRouter Inc. (USA): AI processing gateway — routes our AI requests to model providers such as Anthropic, Google, OpenAI, xAI or DeepSeek. These requests contain publicly available content about the companies you track, plus the names you gave those accounts; they do not contain your email address, password or billing data.
- Jina AI (Germany/USA): Web page reading service — receives the public URLs of the companies you track to fetch their pages. No personal data about you is sent.
To gather public information, we also query public sources and APIs (for example news feeds, job boards, review sites, GitHub and company registries) using only the names and domains of the companies you track — never your own personal data.
7. Data Retention
We retain your account data while your account is active. After account deletion, personal data is removed within 30 days. Anonymized aggregate analytics are retained indefinitely. Billing records are retained for as long as required by applicable accounting law.
8. Your Rights (GDPR/CCPA)
Depending on your location, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data (available in your profile settings)
- Delete your account and all associated data (available in Profile › Danger Zone)
- Export your data in a machine-readable format (on request by email on any plan; also self-serve via CSV export and the REST API on the Business plan)
- Object to certain types of processing
- Withdraw consent for marketing communications at any time
To exercise these rights, use the in-app controls or contact us at hello@intelbrief.xyz. We will respond within 30 days.
9. Cookies
We use only essential cookies necessary for authentication (session management). Our page-view analytics are cookieless and do not identify individuals. We do not use advertising or third-party tracking cookies.
10. Security
We use industry-standard security practices: TLS encryption in transit, hashed passwords (never stored in plain text), and access control on all API endpoints. Despite our efforts, no system is 100% secure. If you discover a security issue, please disclose it responsibly at hello@intelbrief.xyz.
11. International Transfers
Several of our providers are located in, or process data in, the United States (see section 6). For users in the EU/EEA, these transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses (SCCs).
12. Children
IntelBrief is a business tool intended for use by adults (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us.
13. Changes to This Policy
We may update this policy to reflect changes in our practices or for legal reasons. We will notify you by email at least 14 days before material changes take effect.
14. Contact & Complaints
For privacy questions: hello@intelbrief.xyz. If you are in the EU and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority (in France, the CNIL).