Privacy

What we collect

Debrief is in early access. At this stage we only collect the email address (and basic profile, e.g. name) you provide when you request early access via Auth0, our sign-in provider, plus standard product analytics about how the site is used.

Why we collect it

We use your email to contact you about early access and product updates, and analytics to understand interest and improve the site. We do not sell your data.

Legal basis (GDPR)

For visitors in the EU/EEA and UK, we process your email on the basis of your consent (your request for early access) and our legitimate interest in building the product. A small number of our processors are based outside the EU/EEA (see below); where that applies, transfers are covered by Standard Contractual Clauses under each provider's data processing agreement.

Data retention

We keep your email and account data for as long as you're on the early access list or have an active account, and delete it within 30 days of a deletion request. Analytics events are retained for up to 12 months.

Your rights

You can ask us to access, correct, or delete your data, or withdraw consent, at any time. Email privacy@debrief.app and we'll action it.

Processors

We use the following providers to run early access:

• Auth0 (Okta) — sign-in / authentication.
• PostHog (EU-hosted) — product analytics.
• Vercel — frontend hosting.
• Railway and Neon — backend hosting and database.

Each processes data only to provide their service, under their own data processing agreement.

Contact

Questions? Email privacy@debrief.app.