1. Scope
This policy explains how OwlBrief (“we”, “us”) collects, uses, and protects personal data when you use OwlBrief (the “Service”), including our website, apps, AI-powered summaries, and “Discuss with AI” features.
2. Data we collect
We collect the following categories of data:
- Account data: name (if you choose to provide it), email address, password (hashed), settings, and subscription status.
- Content & activity data: briefs and pages you view, topics you follow, interactions such as likes, saves, and shares, questions you ask in “Discuss with AI”, and your approximate timestamps of activity.
- Source metadata: metadata about articles and other sources we summarize (for example URL, headline, publisher name, publish date, and topic tags). We store our own AI-generated summaries and metadata; we do not aim to store full publisher articles.
- Technical data: IP address, device identifiers, operating system, browser type, language, approximate location derived from IP, and logs (including crash logs) to help us keep the Service reliable and secure.
- Communications: messages or emails you send to us (support, feedback, partnership requests) and related metadata.
- Optional integrations: if you explicitly connect third-party services or provide API tokens, we process the data necessary to enable that integration, as described at the time you connect it.
3. How we use data
We use personal data to:
- Provide, maintain, and improve the Service and its core features.
- Generate AI-powered summaries, topic tags, key insights, and answers to your questions.
- Personalize content, topics, and recommendations so the Service stays relevant to you.
- Monitor performance, debug issues, and protect the Service against abuse, spam, and security threats.
- Communicate with you about product updates, changes to this policy, and responses to your support requests.
- Process payments and manage subscriptions, where applicable.
- Comply with legal obligations and enforce our Terms of Service.
AI processing. When you read a brief or ask a question, we may send parts of the article text, metadata, and your question to trusted AI providers (currently OpenAI) to generate summaries and responses on our behalf. We use these providers as processors via their API-based services. According to their published terms at the time of writing, customer API data is not used to train their models unless the customer opts in.
Legal bases (where applicable, such as under GDPR) include: performance of a contract (providing the Service), our legitimate interests (improving the Service, preventing abuse, and ensuring security), your consent (for certain cookies or marketing, where required), and compliance with legal obligations.
6. Data retention
We keep personal data only as long as necessary for the purposes described in this policy, including providing the Service, maintaining business records, resolving disputes, enforcing our agreements, and complying with legal obligations. After that, we delete or anonymize data, unless we are legally required to keep it for longer.
7. Security
We employ reasonable technical and organizational measures to protect personal data, including encryption in transit, access controls, and least-privilege principles for internal access. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
8. Your rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your personal data.
- Object to or request restriction of certain processing.
- Request a copy of your data in a portable, machine-readable format.
- Withdraw consent where processing is based on consent (this will not affect prior processing).
If you are a resident of certain jurisdictions (for example, the EU/EEA, UK, or California), you may have additional rights under local law.
To exercise your rights, email [email protected] . We may need to verify your identity before fulfilling your request. We will respond within a reasonable time and in accordance with applicable law.
9. International transfers
OwlBrief may process and store data in countries other than your own, including through our service providers and AI providers. Where required by law, we use appropriate safeguards for international transfers, such as standard contractual clauses or equivalent mechanisms, to help protect your personal data.
10. Children
The Service is not directed to children under 13 (or any higher minimum age required in your jurisdiction), and we do not knowingly collect personal data from children in that age group. If you believe a child has provided us with personal data, please contact us using the details below, and we will take steps to delete such data where required.
11. Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and may provide additional notice (for example, in the app or by email). Your continued use of the Service after changes take effect means you accept the updated policy.
12. Contact
If you have questions, concerns, or requests about this Privacy Policy or how we handle personal data, please contact us or email [email protected] .