FireBrief

Privacy Policy

Last updated: January 15, 2025

1. Introduction

FireBrief LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our news aggregation service FireBrief ("the Service").

This policy applies to information we collect through our website and when you use our Service. Please read this Privacy Policy carefully. By using FireBrief, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information You Provide

• Account Information: When you sign in with Google, we collect your email address and unique user identifier
• User Content: URLs you submit, reading preferences, and personalization settings
• Communications: Information you provide when you contact us for support

Information Collected Automatically

• Usage Data: Articles you read, mark as complete, and time spent on the Service
• Device Information: Browser type, operating system, and device type
• Network Information: IP address (for rate limiting and security purposes)
• Analytics Data: Page views, clicks, and navigation patterns via Firebase Analytics
• Voice Data: If you use voice features, temporary audio data processed by OpenAI (not stored)

Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

• Maintain your authentication session
• Remember your preferences and settings
• Analyze usage patterns to improve the Service
• Provide security features

3. How We Use Your Information

Primary Purposes

• Service Delivery: To provide, maintain, and improve the Service
• Personalization: To customize article recommendations based on your preferences
• Authentication: To verify your identity and maintain account security
• Communication: To respond to your inquiries and send service-related notifications
• Analytics: To understand how users interact with our Service
• Security: To detect and prevent fraud, abuse, and other harmful activities

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data based on:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing for security, fraud prevention, and Service improvement
• Consent: Where you have given explicit consent for specific processing
• Legal Obligations: Processing necessary to comply with laws

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

Service Providers

• Google Cloud Platform: For hosting, storage, and infrastructure
• Firebase/Google: For authentication and analytics
• OpenAI: For optional voice interaction features (audio only, no personal data)

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, including:

• Court orders or subpoenas
• Government investigations
• To protect our rights, property, or safety
• To prevent illegal activities or violations of our Terms

Business Transfers

If FireBrief is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active
• Usage Data: Generally retained for 90 days for analytics
• Security Logs: Retained for up to 1 year
• Deleted Account Data: Removed within 30 days of account deletion

6. Your Privacy Rights

Rights Under CCPA (California Residents)

If you are a California resident, you have the right to:

• Know: Request information about the personal data we collect, use, and disclose
• Delete: Request deletion of your personal data
• Opt-Out: Opt out of the sale of personal data (we do not sell personal data)
• Non-Discrimination: Not be discriminated against for exercising your rights

Rights Under GDPR (EEA Residents)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to certain types of processing
• Withdraw Consent: Withdraw previously given consent

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@firebrief.com. We will respond to your request within 30 days (or 45 days for complex requests). We may need to verify your identity before processing your request.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using HTTPS/TLS
• Secure storage in Google Cloud Firestore with access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Authentication through secure OAuth 2.0 providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction.

For EEA residents, we rely on appropriate safeguards for international transfers, including standard contractual clauses approved by the European Commission.

9. Children's Privacy

FireBrief is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe we have information from or about a child under 13, please contact us at privacy@firebrief.com.

10. Third-Party Links

The Service contains links to third-party news articles and websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Do Not Track Signals

FireBrief does not currently respond to "Do Not Track" browser signals or similar mechanisms. However, you can control cookies through your browser settings.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through the Service.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

When contacting us, please include your name, email address associated with your account, and a detailed description of your request or concern.

© 2025 FireBrief LLC. All rights reserved.