Privacy Policy

This is a short draft of how Rebrief handles data. It is not legal advice and will be replaced with reviewed copy before a public launch.

What we collect

When you create an account we store your name, email, and a password hash. If Google sign-in is turned on for the product, we also store the profile image and OAuth tokens from that sign-in. We store reviews, themes, pulse snapshots, action items (including completion timestamps), private floor feedback, and an optional name, phone, or email if a guest offers it for follow-up. On Pro we also store competitor summaries from a paid provider or a sample neighborhood when mock flags are on.

How we use it

We use this data to build your theme dashboard, send optional email updates (via Resend) if you ask for it, and process Pro billing (via Stripe). We do not sell guest reviews. AI theme analysis, when enabled, sends review text to OpenAI to cluster complaints.

Processors

• Auth.js — email and password sign-in
• Neon — Postgres database
• Vercel — hosting
• Stripe — subscriptions
• Resend — transactional email (from Rebrief <hello@getrebrief.app>)
• Outscraper — optional live competitor reviews (never a key you paste in the UI)

Retention

We keep account and location data while your account is open. You can disconnect Google in Settings and cancel Pro through Stripe. Ask us to delete an account and we will remove personal rows we control, except where we must keep records (billing, abuse).

Contact

Privacy questions: use the email on your signed-in account. Guests who submit floor feedback should contact the shop that displayed the QR.