Privacy Policy
Last updated: 6 June 2026
BriefShot (“we”, “us”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. By using BriefShot you agree to this policy.
1. Who We Are
BriefShot is an AI-powered shoot planning tool for photographers. Payments are processed by Paddle, who acts as our merchant of record and handles all billing, VAT, and payment compliance on our behalf.
Contact: hello@briefshot.app
2. Data We Collect
- Account data: Email address and name, collected via Clerk authentication when you sign up.
- Content you create: Shoot lists, scene briefs, uploaded reference images, and any text you enter into the Service.
- Credit and billing data: Your credit balance, transaction history, and subscription plan. Payment details (card numbers etc.) are processed and stored exclusively by Paddle — we never see or store them.
- Technical data: IP address, browser type, and usage logs used for security, debugging, and performance monitoring.
3. How We Use Your Data
- To provide, maintain, and improve the Service
- To manage your account and Creative Credit balance
- To process payments and manage subscriptions via Paddle
- To generate AI shoot plans and reference images using your inputs
- To detect and prevent fraud or abuse
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your shoot list content or reference images to train AI models.
4. Third-Party Services
We use the following providers to operate BriefShot:
- Clerk — authentication and user account management
- Supabase — database storage (hosted on AWS EU)
- OpenAI — AI generation of shoot list content (GPT-4o)
- fal.ai — AI reference image generation (Flux Pro)
- UploadThing — image file storage
- Paddle — payment processing and subscription management (merchant of record)
Each provider operates under their own privacy policy and data processing agreements. Your data may be processed outside your country in accordance with applicable data protection laws.
5. Data Retention
We retain your account data and shoot lists for as long as your account is active. Uploaded images are stored until you delete them or close your account.
You may request deletion of your account and all associated data at any time by emailing hello@briefshot.app. We will process deletion requests within 30 days.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Object to or restrict processing
- Receive your data in a portable format
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, email hello@briefshot.app. We will respond within 30 days.
7. Cookies
BriefShot uses essential cookies for authentication and session management only. We do not use advertising, tracking, or analytics cookies. Third-party services (Clerk, Paddle) may set their own cookies in accordance with their respective policies.
8. Security
We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication via Clerk, and access controls on our database. No method of transmission over the internet is 100% secure — if you discover a vulnerability, please contact us immediately.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
10. Contact
For privacy questions or data requests: hello@briefshot.app