Last updated 7 October 2026

Privacy

What information Briefscope keeps, why, who else handles it, and what you can ask us to do with it.

1. Who we are

Briefscope (briefscope.app) is run by Antonescu Stefan-Teodor, Romania. For anything about your data, write to hello@briefscope.app. We read messages in English and Romanian.

2. If you are a designer with an account

What we keep.

Account details: your name, email address and password (stored only as a secure hash, which we cannot read).
Optional details: your studio name, logo, welcome line, accent colour, contact address and time zone, and the answers to the optional questions after signup (what you mostly design and how many client projects you take on a month).
Your projects: everything you add to Briefscope (briefs, plans, files, notes, review versions and final files) and what your clients add to them.
Your agreement to the Terms: which version, and when.
Technical records: the IP address, browser and page address of each request, which our hosting and database providers log for a short time to keep Briefscope running and secure.

Why, and on what legal basis.

Running your account and Briefscope for you, including the emails you send through it and account emails (confirmation, password reset, client activity): our contract with you, the Terms.
Telling you about changes to the service, the Terms or prices, such as the 30 days’ notice before paid plans: our contract with you.
Keeping Briefscope secure, preventing abuse and enforcing the plan generation limits: our legitimate interest in a safe, working service.
Understanding who uses Briefscope, from the optional signup answers, to decide what to build: our legitimate interest in improving it. The answers are optional.
Keeping the record of your agreement to the Terms, and anything the law requires us to keep: our contract with you, and our legal obligations.

We don’t send marketing emails, sell your data, show ads, or use your content to train AI.

3. If a designer shared a project with you

The designer or studio who sent you the link decides what your project collects and why, and is responsible for your information. Briefscope stores and processes it only for them.

For your project we keep: your name and email as the designer entered them, your brief answers, the files you upload, the kickoff call times you pick or suggest (with your time zone, so the designer sees them in your time), your approvals and feedback, and a testimonial if you choose to leave one.

Vercel hosts the project page and sees your requests to it. When the designer sends you an email through Briefscope, Resend delivers it, and your replies go to the designer. If the designer uses AI planning, the text of your brief is sent to OpenAI to draft a plan for the designer; your files, name and email are not. The project page sets one cookie, briefscope-portal, which holds your project link so it stays out of the page’s address. It is sent only to that project’s page, lasts 30 days, and the page runs no analytics.

To see, correct or delete your information, ask the designer. When they delete the project, its brief, files and feedback are removed from Briefscope. If you can’t reach the designer, write to us and we’ll pass your request on.

4. Who else handles the data

These providers run parts of Briefscope. Each handles data only to provide its service to us, under a contract that requires it to protect the data.

Supabase keeps the database and handles designer sign-in. Stockholm, Sweden (EU).
Vercel hosts the app. Its functions run in Stockholm, Sweden; its network serves pages from the location nearest each visitor. It receives every request (IP address, browser, the page address) and keeps short-lived request logs.
Cloudflare R2 stores project files privately. Eastern Europe.
Resend sends the emails. Ireland (EU). It receives the recipient’s address, the message and the sender name.
OpenAI drafts the reading of the brief and the plan when a designer asks for one. United States. It receives the text of the brief and the project’s description, type and deliverables; never files, or the client’s name and email. Under its API terms it does not train on this data and keeps it only for a limited time to detect abuse.

Transfers outside the EU. OpenAI is in the United States, and some providers are US companies that may handle data there. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s Standard Contractual Clauses.

We share data with authorities only when the law requires it.

5. How long we keep it

Your account, your agreement to the Terms, and your projects with their files: until you delete them or the account.
A deleted project: its brief, files and feedback are removed when the designer deletes it.
Unfinished uploads: removed after 7 days.
Request logs and sent-email records: kept by Vercel and Resend for a short time, then deleted by them.

Deleted data can stay in our providers’ backups for a short time, until those backups are overwritten.

6. Cookies

Briefscope sets only the cookies it needs: the Supabase session cookie that keeps a designer signed in, briefscope-theme (the designer’s Light, Dark or System choice), briefscope-sidebar (whether the sidebar is collapsed), and on a client’s project page briefscope-portal (the project link, sent only to that project’s page, for 30 days). The theme and sidebar cookies are set only when you use those controls. In your browser’s own storage, Briefscope also remembers your theme and which side panel sections you left open. No analytics or advertising cookies, and no tracking.

7. Emails

When a designer notifies a client, the email comes from “{Studio} via Briefscope”, and replies go to the studio’s contact address, or to the designer’s login email if the studio set none. Designers get an email when a client acts on a project; they can turn these off in Settings.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or give it to you in a portable format, and you can object where we rely on our legitimate interest. Write to hello@briefscope.app; we answer within one month. Much of this you can do yourself: edit your profile in Settings, download your files, delete a project, or delete your account in Settings → Account → Delete account (every project goes with it; it can’t be undone).

If you think we’ve handled your data wrongly, you can complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or to the authority where you live or work. We’d like the chance to fix it first, so please write to us too.

Briefscope makes no decisions about you by automated means. AI drafts a plan only when a designer asks, and the designer decides what to do with it.

9. Security

Connections are encrypted. Files are stored privately and opened only through short-lived links. Client links are checked against a hash. An encrypted copy is also kept, only so the designer can copy the link again or send it to their client. Each designer’s data is kept separate from every other designer’s. No system is perfectly secure; if a breach puts your data at risk, we tell you, and the authorities, as the law requires.

10. Changes to this notice

If we change this notice in a way that matters, we tell designers by email or in Briefscope before the change applies. The date at the top shows the latest version. The Terms say how we process your clients’ data for you (section 14).