Privacy Policy

Brieft is a workspace for content creators and their video editors, operated by Jay Joseph Entertainment LTD, registered office 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. For any privacy question, or to exercise your rights, contact us at hello@jayjoseph.co.uk. We are the data controller for the personal data described here.

We collect only what we need to run the service:

• Account details. Your email address, name and display details, and the workspaces and roles you belong to. We use passwordless magic-link sign-in, so we do not store passwords.
• Content you upload. The videos, footage, clips, captions, thumbnails and notes you add to your cards.
• Connected social accounts. When you connect a social channel for publishing, we store a reference to that connected account and its public handle. We do not store your social passwords.
• Usage and technical data. Basic logs, device and browser information needed to keep the service secure and working.

• To provide the workspace: boards, footage handoff, captions and publishing.
• To authenticate you and keep your account secure.
• To publish content to the social platforms you explicitly connect and choose.
• To operate, maintain, debug and improve the service.
• To contact you about your account and service updates.

We do not sell your personal data, and we do not use your uploaded content to train our own models.

UK GDPR requires us to tell you which lawful basis we rely on for each thing we do with your data.

• Contract. Running your workspace: accounts, boards, footage handoff, captions, publishing and billing. We cannot provide what you signed up for without this.
• Legitimate interests. Keeping the service secure and available, preventing abuse of sign-up and of the features that cost us money, and improving the product. We record sign-in attempts for this reason and keep them for six months.
• Consent. Connecting a social account, and being filmed as a participant. Both can be withdrawn at any time.
• Legal obligation. Keeping billing and invoice records for as long as tax law requires.

Jay Joseph Entertainment LTD films street interviews for its own channels. If you took part in one, we are the data controller for that footage. It does not come from anyone else and no Brieft customer can capture it: the tool we use to record consent is ours alone and is not part of the product we sell.

What we hold is limited to what was recorded at the time: the footage, your first name, your social handle if you gave one, a photo used for a video thumbnail, and a record of the consent you gave including its wording and when you gave it. We do not use faces or voices to identify anyone, we do not sell any of it, and we do not use it to advertise anything other than the video you appear in.

You can ask for a copy of what we hold, or ask us to delete it, by emailing hello@jayjoseph.co.uk. Tell us roughly where and when you were filmed so we can find you. You can withdraw your consent at any time, and you can complain to the Information Commissioner’s Office.

When you connect a social account (for example TikTok, Instagram or YouTube) for publishing, the sign-in and authorisation happen through our publishing provider, Post for Me, and the platform's own OAuth flow. The access tokens that let us publish on your behalf are held by Post for Me, not stored in Brieft's own database. We keep only a reference to the connected account so you can select it when you publish.

We access these platforms solely to publish the content you choose and to show your connected account details. You can disconnect a channel at any time, which revokes our access. You can also revoke access directly in the platform's own settings.

Your use of each platform is also governed by that platform's own terms and privacy policy, including TikTok's Privacy Policy.

We share data with trusted providers only as needed to run the service:

• Vercel: Application hosting.
• Supabase: Database hosting.
• Cloudflare R2 and Wasabi: Video and file storage.
• Post for Me: Social publishing and platform OAuth.
• Resend: Transactional email.
• Stripe: Payments and subscription billing.
• Zernio: WhatsApp notifications to editors.
• Telegram: Optional workspace notifications.
• AssemblyAI: Transcription for captions.
• Anthropic, OpenAI, Google and FAL: AI features.

Each provider processes data on our behalf under its own security and privacy commitments.

Data may be processed in the United Kingdom, the European Union and the United States by the providers listed above. Where data leaves the UK or EU, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses.

We keep your account data for as long as your account is active. Uploaded content is retained while it lives in your workspace, and source footage may be moved to cold archive storage. When you delete content or close your account we remove it within 30 days, except where we must keep something to meet a legal obligation: billing and invoice records are kept for seven years for tax purposes. Sign-in attempt logs, which we keep to prevent abuse, are deleted after six months. Download packages are deleted 48 hours after they are built. “A reasonable period” is not a retention policy, so these are the actual numbers the system enforces.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To make a request, email hello@jayjoseph.co.uk. We will respond within the time required by law. If you are in the UK, you can also complain to the Information Commissioner's Office.

You can request deletion of your account and its data at any time by emailing hello@jayjoseph.co.uk. For data held by a connected social platform, you can also remove Brieft's access from that platform's app settings.

We use no analytics, advertising or tracking cookies of any kind, and no third-party tracking scripts. Because nothing we store is used to track you, we do not show a consent banner. Everything below is either required to run the service or remembers a choice you made in the app, and none of it leaves your browser except the sign-in cookie.

• Sign-in session. Keeps you signed in and keeps the service secure. Strictly necessary; the service cannot work without it.
• Last brand selected (social_channel). Remembers which brand you were last working in, so the publishing screen opens where you left off. Set only after you sign in.
• View preferences.Stored in your browser, not on our servers: your board / list / calendar choice, your scroll position, whether earnings are hidden, the player’s mute setting, and the name a filmer last used when uploading.
• Support impersonation. A short-lived signed cookie used only when our super administrator previews a workspace to help with a support issue. It expires after one hour and is read-only.

Clearing your browser data removes all of it. The only third party that sees your IP address on our public pages is the font host that serves our typeface; no cookie is set by it.

Brieft is a tool for professional creators and their teams and is not intended for anyone under 16. We do not knowingly collect data from children.

We may update this policy from time to time. When we do, we will change the date at the top of this page and, for material changes, let you know in the app or by email.

Jay Joseph Entertainment LTD, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. Email hello@jayjoseph.co.uk.