Privacy Policy

1. Scope and Legal Professional Context

This Privacy Policy explains how BriefHQ collects, uses, protects, and discloses personal data and document content when you access our website (briefhq.com), web application, and related software services (collectively, the "Service").

We understand the stringent ethical duties incumbent upon attorneys, including ABA Model Rule 1.6 (Confidentiality of Information) and equivalent state bar obligations. Our infrastructure, data pipeline, and AI inference contracts are engineered intentionally to preserve privilege, confidentiality, and institutional control.

2. The BriefHQ Zero-Training Guarantee

Specifically:

• No Model Retraining: User queries, uploaded PDF text, and generated summaries are excluded from training corpuses.
• Isolated Tenant Sandboxing: Workspaces are logically and cryptographically partitioned to ensure data cross-contamination between law firms is mathematically impossible.
• Ephemeral In-Memory Processing: Document parsing operates inside transient, stateless compute containers that automatically purge upon session termination.

3. Information We Collect

We collect only the minimum information necessary to provide and bill for our software:

• Account & Profile Information: Name, professional email address, law firm or organization name, and authentication credentials when you register for an account or waitlist.
• Billing Information: Payment card details and billing addresses. All payment processing is handled directly by our PCI-DSS Level 1 certified billing partner (Stripe). BriefHQ never stores full credit card numbers or security codes on our servers.
• Uploaded Documents ("Customer Content"): PDF contracts, briefs, agreements, and text extracts you submit to the Service. As described in Section 2, you retain 100% intellectual property ownership of all customer content.
• Technical Telemetry: Anonymized log data including browser type, IP address, operating system, and feature interaction metrics used strictly to debug software errors and maintain service availability.

4. Security and Data Protection Standards

BriefHQ implements defense-in-depth technical and organizational safeguards aligned with industry-standard benchmarks:

5. Disclosure to Third Parties & Sub-processors

We do not sell, rent, monetize, or trade your personal information or document content to data brokers, advertisers, or third parties.

We share data only with verified third-party service providers (sub-processors) who perform infrastructure services on our behalf (e.g., cloud hosting, payment billing, zero-retention model inference). All sub-processors are bound by strict Data Protection Agreements (DPAs) and confidentiality covenants.

6. Your Privacy Rights (GDPR, CCPA & State Laws)

Depending on your jurisdiction, you possess statutory rights regarding your personal information, including:

• The right to access, inspect, or receive a portable copy of personal data we hold about you.
• The right to rectify or correct incomplete or inaccurate records.
• The right to request the permanent deletion and erasure of your personal data.
• The right to opt-out of marketing communications at any time.

To exercise any of these rights, please email us directly at privacy@briefhq.com.

7. Contact Information

If you have questions, comments, or security review inquiries regarding this Privacy Policy or our data governance practices, please reach out to our team: