Privacy Policy

We collect only what we need to run and improve BriefBench. Audience measurement is entirely first-party: no third-party ad trackers, no data resale, no profiling for targeting.

The data controller is Bahri Labs, 47 rue Vivienne — 75002 Paris, France.

Depending on your usage, we process:

• Account: your email address and display name, provided at sign-in, along with the identifier assigned by our sign-in service, your sign-in method and, if that method provides one, your profile photo.
• Account settings and status: your language, your preferences (search mode, notifications), the date you hid the first steps, if you did, the day of your last visit and the delivery of our emails to your address (welcome email sent, bounce, spam complaint).
• Product usage: your searches, watches, folders (saved profiles with your notes, statuses and tags; share links) and assistant conversations, needed to run the service.
• Trial search on the home page, without an account: the text entered, the platform searched and the profiles shown, kept for 7 days and not linked to any person.
• Feedback and notifications: your recommendations on profiles (for or against) and the reasons you give; your ratings and comments, with the screen they were sent from and your browser identification; the notifications the product sends you and the devices on which you turn on push notifications.
• Subscription and credits: your plan and its amount excluding tax, its billing dates, your identifiers with our payment provider, your subscription history and, if you cancel, the reason and comment you leave; your credits granted and used.
• A/B tests: the version of a screen assigned to you when we compare two.
• Audience measurement (first-party): the pages you view and key actions (a search started or completed, a profile opened or saved, a list exported, a subscription taken out); for a profile, which one, the rank it was shown at and the sort order in use. Your acquisition source (campaign parameters and the referrer site's hostname — never the full URL) and your landing page are recorded on your account when it is created. No IP address is stored.
• Functional cookies: your session (AuthToken, 12 days) and language (NEXT_LOCALE, 1 year). Strictly necessary; these are not ad trackers.
• bb_acq cookie: if you arrive signed out on the home, sign-in or sign-up page, it keeps your first acquisition source and landing page until your account is created. 90 days at most; it is cleared as soon as you browse signed in.
• bb_outils cookie: it counts the lookups this browser starts from our public tools, without recording which profiles were looked up, and expires at midnight UTC.
• __Host-bb_sse cookie: set by our application server, it authenticates the live progress of your searches, profile pages and assistant. It expires with the sign-in token it carries and is cleared when you sign out.

To provide the service, understand how it is used and improve it, including by comparing two versions of the same screen (A/B tests); to bill your subscription; to keep the service secure and prevent abuse; to send you emails and, if you turn them on, push notifications; and to answer your support requests. We do not reuse your data for anything else, and we do not combine it with outside sources to profile you.

Each purpose has its own:

• Providing the service and running your account: performance of our contract with you.
• Billing and bookkeeping: our legal obligations.
• Writing to you about your account — address confirmation, forgotten password, finished search: performance of that same contract. Emails that are not essential carry an unsubscribe link.
• Internal audience measurement: our legitimate interest in improving the product. You can object at any time.

Audience-measurement events are kept for 90 days, then anonymously aggregated or deleted. An assistant conversation is deleted after 90 days without activity. Account data is kept for as long as your account exists, then deleted.

You have the following rights over your data:

• Access, rectification and erasure. You can delete your account yourself, from your settings.
• Objection to processing based on legitimate interest, including audience measurement.
• Portability of your data.
• Restriction of processing.

To exercise these rights, write to us at privacy@briefbench.app. We answer at that address.

We do not sell your data and we never pass it on for advertising. It is processed by our providers, solely to run the service and under contract:

• Hosting and database: inside the European Union (Germany).
• Payment and billing.
• Account sign-in and queueing of background work.
• Push notifications, if you turn them on.
• Sending the service’s automated emails: inside the European Union.
• Receiving the emails you write to us, and sending our replies: outside the European Union.
• Collecting creators’ public data from the platforms; this provider receives your search terms (keywords, hashtags), including the trial search on the home page, and the profiles whose link you paste.
• Artificial intelligence, for the assistant and content analysis: outside the European Union. This provider receives your messages to the assistant, the text of your searches (description, keywords, hashtags) and the content of the web pages whose address you give us.

We will tell you who these providers are on request, at the address given under “Your rights”.

We may update this policy; the date at the top shows the latest version.