Template for legal review · effective 2026-11-14 · Brisbel

Privacy Notice

This notice explains what personal data [LEGAL_COMPANY_NAME] ("we") processes when you use Brisbel, why, for how long, who else handles it, and the rights you have under the EU and UK General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is [LEGAL_COMPANY_NAME], [LEGAL_ADDRESS]. Contact: [LEGAL_CONTACT_EMAIL]. Data protection contact: [LEGAL_DPO_EMAIL].

2. What we process, and why

Account data: email, name, password hash, two-factor secret (encrypted), sign-in sessions. To provide your account (contract, Art. 6(1)(b)) and to keep it secure (legitimate interest, Art. 6(1)(f)).
Your content: briefs, directions, files you upload, the films and videos made from them, and the agents' activity log. To make the films you ask for (contract).
Usage and billing: model requests with token counts, renders, fees, your balance, holds, payments and subscriptions. To charge you correctly and show you what you paid for (contract), and to keep accounting records (legal obligation, Art. 6(1)(c)).
Security records: sign-in attempts, key and app changes, with a keyed hash of your IP address (never the address itself) and your browser name. To protect accounts and the service (legitimate interest).
Consent records: which version of these terms you accepted, and whether you want product news (consent, Art. 6(1)(a), which you can withdraw in Settings at any time).

We do not sell personal data, do not use it for advertising, and do not train models on your content.

3. Who else processes it

Neon (database hosting): all account, usage and billing records.
Cloudflare R2 (storage): rendered videos.
Modal (rendering): project data and assets needed to render a film, deleted from its storage after 7 days.
AI model providers you or your agent choose (for example via OpenRouter, Anthropic, OpenAI, DeepSeek): the briefs, materials and frames the agents send while making a film.
Freemius (reseller and payments): your email and payment details, as merchant of record for purchases.
Email delivery: [LEGAL_EMAIL_PROVIDER], for account emails.
Server hosting: [LEGAL_HOSTING_PROVIDER].

Each acts on our instructions under a data processing agreement. Where one is outside the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

4. How long we keep it

Account and content: while your account exists; deleted when you delete it.
Agent activity logs: 90 days.
Detailed usage records: 730 days.
Security log: 365 days.
Payment webhook payloads: 30 days.
Ended sessions and expired tokens: 30 days.
Billing records (ledger and payments): 10 years, as tax law requires. After you delete your account they are kept under a pseudonym, without your name or email.

5. Your rights

You can access and take a copy of your data (Settings, Download my data), correct it (Settings), delete your account and its data (Settings, Delete account), object to processing based on legitimate interest, restrict processing, and withdraw consent at any time. Write to [LEGAL_DPO_EMAIL] for anything the dashboard does not cover; we answer within one month. You may also complain to [LEGAL_SUPERVISORY_AUTHORITY].

6. Cookies

We use one strictly necessary cookie, motif_session, to keep you signed in. The theme you pick is stored in your browser only. There are no analytics, advertising or tracking cookies, so we ask for no cookie consent.

7. Security

Passwords are hashed with scrypt; tokens and keys are stored only as digests; two-factor secrets are encrypted with AES-256-GCM; every connection is encrypted in transit; each account's data is isolated from every other's.

8. Changes

We will tell you by email before a material change to this notice takes effect.

2. What we process, and why

Account data: email, name, password hash, two-factor secret (encrypted), sign-in sessions. To provide your account (contract, Art. 6(1)(b)) and to keep it secure (legitimate interest, Art. 6(1)(f)).

Your content: briefs, directions, files you upload, the films and videos made from them, and the agents' activity log. To make the films you ask for (contract).

Usage and billing: model requests with token counts, renders, fees, your balance, holds, payments and subscriptions. To charge you correctly and show you what you paid for (contract), and to keep accounting records (legal obligation, Art. 6(1)(c)).

Security records: sign-in attempts, key and app changes, with a keyed hash of your IP address (never the address itself) and your browser name. To protect accounts and the service (legitimate interest).

Consent records: which version of these terms you accepted, and whether you want product news (consent, Art. 6(1)(a), which you can withdraw in Settings at any time).

We do not sell personal data, do not use it for advertising, and do not train models on your content.

3. Who else processes it

Neon (database hosting): all account, usage and billing records.

Cloudflare R2 (storage): rendered videos.

Modal (rendering): project data and assets needed to render a film, deleted from its storage after 7 days.

AI model providers you or your agent choose (for example via OpenRouter, Anthropic, OpenAI, DeepSeek): the briefs, materials and frames the agents send while making a film.

Freemius (reseller and payments): your email and payment details, as merchant of record for purchases.

Email delivery: [LEGAL_EMAIL_PROVIDER], for account emails.

Server hosting: [LEGAL_HOSTING_PROVIDER].

Each acts on our instructions under a data processing agreement. Where one is outside the EEA or UK, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

4. How long we keep it

Account and content: while your account exists; deleted when you delete it.

Agent activity logs: 90 days.

Detailed usage records: 730 days.

Security log: 365 days.

Payment webhook payloads: 30 days.

Ended sessions and expired tokens: 30 days.

Billing records (ledger and payments): 10 years, as tax law requires. After you delete your account they are kept under a pseudonym, without your name or email.

5. Your rights