Privacy Policy

Blueprint Software LLC ("Briefs", "we", "us", or "our") operates the Briefs
service at sharebriefs.com (the "Service"). This Privacy Policy explains what
information we collect, how we use it, and the choices you have. By using the
Service, you agree to the practices described here.

Account information. When you create an account we collect your name, email
address, username, and profile details. If you sign in through a third-party
identity provider (such as Google, Apple, or your organization's single sign-on
provider), we receive basic profile information from that provider.

Content you create. We store the briefs, comments, organization and team
data, and other content you author or upload to the Service.

Billing information. Paid plans are processed by our payment provider,
Stripe. We do not store full payment card numbers on our systems; Stripe
handles card data in accordance with its own terms and PCI-DSS obligations.

Usage and device data. We automatically collect log data such as IP
address, browser type, pages viewed, and timestamps, along with cookies and
similar technologies needed to operate and secure the Service.

We use the information we collect to:

• provide, maintain, and improve the Service;
• create and manage your account and organizations;
• process transactions and send related information such as receipts;
• authenticate users and secure the Service against fraud and abuse;
• respond to your requests and provide customer support;
• send administrative and, where permitted, marketing communications; and
• comply with legal obligations.

We do not sell your personal information. We share information only:

• With service providers who process data on our behalf, such as our
  hosting, authentication (Firebase), single sign-on, payment (Stripe), and
  analytics providers, under contracts that require appropriate safeguards;
• Within your organization, when you join or are invited to an organization
  or team, so that administrators and members can collaborate;
• For legal reasons, when required by law or to protect the rights, safety,
  and property of Briefs, our users, or the public; and
• In a business transfer, in connection with a merger, acquisition, or sale
  of assets, subject to this Policy.

We use cookies and similar technologies that are strictly necessary to keep you
signed in and to keep the Service secure. Where we use non-essential cookies, we
will ask for your consent as required by applicable law.

We retain personal information for as long as your account is active or as
needed to provide the Service, comply with our legal obligations, resolve
disputes, and enforce our agreements. You may request deletion of your account
at any time.

We use administrative, technical, and physical safeguards designed to protect
your information. No method of transmission or storage is completely secure, so
we cannot guarantee absolute security.

We may process and store information in countries other than the one in which
you reside. Where required, we rely on appropriate transfer mechanisms to
protect your information.

Depending on where you live, you may have rights to access, correct, delete, or
port your personal information, or to object to or restrict certain processing.
To exercise these rights, contact us using the details below. We will respond
consistent with applicable law.

If you are a business customer that requires a Data Processing Addendum (DPA) to
comply with GDPR or similar laws, one is available on request by contacting
legal@sharebriefs.com.

The Service is not directed to children under 16, and we do not knowingly
collect personal information from them. If you believe a child has provided us
information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material
changes, we will update the "Last updated" date above and, where appropriate,
provide additional notice.

If you have questions about this Privacy Policy or our data practices, contact us
at privacy@sharebriefs.com.