Privacy Policy

Who operates BriefLoft

Media Yard LLC operates BriefLoft and is responsible for the information practices described in this policy. References to “BriefLoft,” “we,” “us,” or “our” mean Media Yard LLC doing business as BriefLoft. Our mailing address is Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.

Our data-protection roles

Media Yard LLC generally acts as a controller for account, support, usage, security, and billing information. For personal data contained in proposals, client emails, notes, links, and responses, we generally act as the business customer’s processor or service provider. If the customer prepares a proposal for another organization, we may act as a subprocessor. Our Data Processing Addendumprovides the applicable business-customer terms.

Information we collect

• Account and workspace information: email address, authentication details handled by our authentication provider, workspace name, membership, and role.
• Proposal and client information: proposal titles, client and business names, client email addresses, scope, deliverables, pricing, timelines, terms, personal notes, client responses, proposal history, and share-link settings.
• Usage and subscription information: proposal counts, plan, subscription status, Stripe customer and subscription identifiers, and billing events. BriefLoft does not store complete payment-card numbers.
• Technical information: security, diagnostic, and request information made available by our hosting and infrastructure providers, plus aggregate page-view and visitor information used to understand whether the service is working effectively.

How we use information

We use information to authenticate users; operate, secure, troubleshoot, and improve BriefLoft; create and deliver requested proposals; record client responses; provide automated assistance; enforce usage limits; process subscriptions; provide support; prevent abuse; and comply with legal obligations. We do not sell personal information, and we do not use proposal content to train our own AI models.

Proposals and AI

Proposal inputs may be sent to an AI provider when you use an AI-assisted feature. Do not include passwords, payment-card details, government identifiers, health information, or other highly sensitive information in a proposal. Read our AI Transparency Notice for details about AI-assisted features and their limitations. AI-assisted features do not publish or email a proposal without your action.

Service providers

We use vendors to provide the service, including Supabase for authentication and database services, Vercel for hosting, Stripe for billing, Resend for email delivery, and OpenAI for AI-assisted features. Vercel also provides privacy-focused website analytics. These providers process information under their own terms and privacy commitments as needed to perform services for us.

Subprocessors and international processing

Principal providers that may process proposal or client data include Vercel for hosting, Supabase for authentication and database services, Resend for email delivery, and OpenAI for AI-assisted features. Stripe processes subscription billing information and does not receive proposal content for that purpose. These providers may process data in the United States or other countries where they or their subprocessors operate. Where required, we rely on contractual or other lawful transfer safeguards. See our Data Processing Addendum for more detail.

Sharing and selling

We disclose information to service providers, workspace members according to their roles, and authorities or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or protection of rights. We do not sell personal information or share it for cross-context behavioral advertising.

Proposals and client links

Proposal drafts are private by default. If you publish a client link, anyone with that link may view the proposal and may be able to submit a response until you revoke access. Avoid sharing a link publicly if its proposal contains information you do not want others to see.

If you received a proposal from a BriefLoft customer, that customer controls the proposal and response information. Contact the sender to correct or withdraw a response. You may also email privacy@briefloft.com, and we will help route the request where appropriate.

Retention

We retain account, proposal, response, usage, and billing records while needed to provide the service and for legitimate security, dispute, accounting, and legal purposes. Retention periods vary by data type. Deletion requests may be subject to limited legal, fraud-prevention, backup, and shared-workspace exceptions.

Your choices and rights

Signed-in users can export their account data and request deletion from Settings. You may also request access, correction, or deletion by emailing privacy@briefloft.com. We may verify your identity before completing a request. Depending on where you live, additional rights may apply.

Cookies and browser signals

We use essential browser storage and cookies for authentication, security, and session continuity. We also use aggregate website analytics to understand visits and page usage. We do not use advertising cookies or sell analytics information. Because there is no uniform interpretation of browser “Do Not Track” signals, BriefLoft does not respond to them; we will update this policy if our practices change.

Security

We use safeguards intended to protect information, including access controls and database row-level security. No online service can guarantee absolute security, so keep your password confidential and notify us if you suspect unauthorized access.

Children

BriefLoft is intended for adults using it for business or professional purposes. People under 18 may not create an account. We do not knowingly collect personal information from children.

Changes and contact

We may update this policy as the service evolves. We will post the revised effective date and provide additional notice when required. Questions for Media Yard LLC can be sent to privacy@briefloft.com or mailed to Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.