Privacy Policy

SayBriefly is built privacy-first. The raw content of your email, meetings, and Slack messages is processed on your device or in your browser and is never stored on our servers. Only the structured facts we extract — and an on-device reworded summary — sync to your workspace. This policy explains exactly what we do and don't collect.

It covers the SayBriefly desktop app (macOS), the SayBriefly Mail Chrome extension, and the SayBriefly web workspace (together, the "Service").

1. Information we collect

Account information. When you create an account we collect your email address and name through our authentication provider (Supabase).

Email (Chrome extension).The extension reads the Gmail threads you open, locally in your browser. Classification runs on-device — Apple Foundation Models on Mac, or Chrome's built-in Gemini Nano. Your email body, subject, and message ID are not sent to or stored by us. Only structured facts (decisions, action items, scope signals) and a short reworded summary sync to your workspace. The provider message ID is SHA-256 hashed before any backend write.

Meetings (desktop app, macOS). Audio is captured and transcribed entirely on your Mac. Recordings and transcripts stay on your device; only the summary and notes you choose sync to your workspace.

Slack (optional). If you connect Slack, messages in channels you link are read and classified. Raw message text is retained for at most 24 hours and then discarded — only structured facts persist.

Attachments & feedback. If you upload a screenshot or submit feedback, we store that file and basic technical context (page URL, browser user-agent) to reproduce issues.

2. How we use information

We use the information above only to provide and improve the Service: to authenticate you, surface decisions, action items, scope alerts, and summaries inside your workspace, and to diagnose problems you report. We do not use your content to build advertising profiles.

3. On-device and optional cloud AI

Classification and summarization run on-device by default. An optional cloud fallback (Google Vertex AI / Gemini) is off by default. If you explicitly enable it, only the on-device reworded summary is sent — never your raw email body, meeting audio, or message content.

4. How we share information

We do not sell your personal information. We share data only with service providers that operate the Service under contract:

• Supabase — database, authentication, and file storage.
• Amazon Web Services (S3) — storage of attachments you upload.
• Google Cloud (Vertex AI) — only if you opt into cloud AI, and only for the reworded summary.

We may disclose information if required by law or to protect the rights and safety of our users.

5. Data retention

Structured facts and summaries are kept while your account is active. Slack raw message text is deleted within 24 hours. Email bodies and meeting audio are never stored by us. When you delete your account, we delete your associated data.

6. Security

Data in transit is encrypted with TLS, and data at rest is encrypted by our infrastructure providers. Access is restricted and scoped to your workspace.

7. Your rights

You can access, correct, export, or delete your data at any time from your account settings or by contacting us. We will respond to verified requests within a reasonable period.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, notify you in the app.

10. Contact

Questions about this policy or your data? Email us at privacy@saybriefly.app.