Privacy Policy

1. Introduction

Guardian Brief LLC ("GuardianBrief," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at guardianbrief.com and related services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information you provide directly

• Account information: Email address when you register
• Parent profile: Information about your parent or loved one you choose to provide (e.g., name, location, technology comfort level) to personalize the Service
• User content: Messages, screenshots, and descriptions you submit for evaluation
• Payment information: Billing details processed by Stripe — we do not store your credit card information directly

Information collected automatically

• Log data: IP address, browser type, pages visited, and timestamps
• Usage data: Features used, actions taken, and session activity
• Security events: Failed login attempts and rate limit triggers (stored in hashed or anonymized form)
• Cookies: Session cookies required for authentication; we do not use third-party advertising cookies

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, personalize, and improve the Service
• Process subscriptions and payments
• Generate AI-powered evaluations, briefings, and scripts tailored to your parent's profile
• Detect, prevent, and respond to fraud, abuse, and security threats
• Communicate with you about your account, updates, and support
• Comply with legal obligations

We do not use your submitted content or parent profile data to train AI models.

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers: Trusted third parties that help us operate the Service, including:
  • Supabase (database and authentication)
  • Anthropic (AI processing)
  • Stripe (payment processing)
  • Vercel (hosting and infrastructure)
  • Upstash (rate limiting)
  • Resend (transactional email)
• Legal compliance: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you
• Protection of rights: To protect the safety, rights, or property of GuardianBrief, our users, or others

5. Data Retention

We retain your account and profile data for as long as your account is active. Evaluation history and uploaded screenshots are retained to provide the Service and may be deleted upon account closure. Security and audit logs are retained for up to 90 days. You may request deletion of your data at any time by contacting us at support@guardianbrief.com.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including:

• TLS encryption for all data in transit
• Encrypted storage for data at rest
• HTTP-only, secure session cookies
• Rate limiting and brute-force protection on all authentication endpoints
• Role-based access controls
• Security event logging and monitoring

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies

We use cookies solely for authentication and session management. We do not use cookies for advertising or cross-site tracking. You may disable cookies in your browser settings, but doing so will prevent you from logging in to the Service.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

9. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at support@guardianbrief.com. We will respond to your request within 30 days.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, where required, notify you by email or through the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania, USA, without regard to its conflict of law provisions.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Guardian Brief LLC
Pennsylvania, USA
support@guardianbrief.com