Privacy Policy

Last revised: 21 September 2025

This privacy policy (the "Privacy Policy") explains how OnBrief.ai and its affiliates ("OnBrief.ai," "Company," "we," "us," or "our") collect, use, maintain, protect and disclose Personal Data you provide to us or which we collect through your use of our websites (our "Websites"), our platform (the "Platform") and our services (the "Services"). "Personal Data" means information that allows you to be identified or identifiable.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Websites, Platform or Services.

Personal Data we collect

a. The Personal Data you voluntarily provide to us

We collect Personal Data that you voluntarily provide to us when you register on the Websites or the Platform, express an interest in obtaining information about us or our products and Services, when you use the Services, or when you otherwise contact us. We may collect and process the following Personal Data about you:

• Name and contact information. We may collect your first and last name, email address, company name, your title, LinkedIn URL, company size, country of residence, and other similar contact information when you contact us, sign up for email lists, promotions, or marketing blogs or newsletters by completing forms on our website www.onbrief.ai, complete surveys on our site or as carried out by us or our approved third parties, participate in user forums, participate in research opportunities, register for events, trainings or certifications, and/or interact with us at an event. We also use this information to manage our relationship with you.
• Your image and voice. If you attend a hosted or sponsored event, we may capture your image and/or voice in any video, photograph or audio recording taken at the event.
• Account information. We may collect information that you upload to, or share through, our Websites or by using our Services, including profile information or any personal information in data that you upload.
• Support. If you contact us for customer or technical support, we may keep a record of that correspondence or conversation.
• Payment information. We collect Personal Data necessary to process your payment through our payment provider Stripe.

b. The Personal Data we collect from other sources

We may collect Personal Data about you, including first and last name, employer, title, and business contact information, from other sources such as public databases, social media platforms, third-party event hosts and other third parties that you interact with and that OnBrief.ai may engage from time to time, where such Personal Data is publicly available and where we otherwise have permission to collect such Personal Data.

We may also collect information from third-party search engines such as Google and Bing relating to your search activity. If we do obtain your Personal Data from a third party, your privacy rights under this Privacy Policy are not affected and you are still able to exercise your rights.

c. The Personal Data we collect through your use of the Platform and Services

With respect to use of our Platform and Services, this Personal Data may include the business email address you use to log in to the Services, and other device and usage information, including your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information such as traffic data, location data, weblogs and other communication data and the resources that you access. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

d. The Personal Data we collect to assist you

If you contact our Support or Customer Success teams, your name and contact information will be recorded on an internally-generated ticket. We keep this Personal Data for a limited period to track recurring issues and improve our processes and products.

How we use your Personal Data

We may use your Personal Data for a variety of business purposes as described below. We process your Personal Data for these purposes in reliance on our legitimate business interests, to enter into or perform a contract with you, with your consent, for vital interests, and/or for compliance with our legal obligations. Our purposes include:

• To provide you with products and services you have requested from us.
• To send you Services-related and administrative information, including information about changes to our terms, conditions, and policies.
• To provide you with support, facilitate resolution of any issues, or to diagnose problems with the Services or Platform.
• To fulfill and manage your orders, registrations, and payments made through our Websites.
• To administer promotions or contests that you elect to participate in.
• To provide you with relevant marketing, advertising, and promotional communications, if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time (see "What are your rights?" below).
• To request feedback about your use of our Services and Websites.
• To study how our Services are used.
• To protect our Websites and Platform, including through fraud monitoring and prevention.
• To respond to legal requests and prevent harm.
• For other business purposes such as administration and IT services, data analysis, identifying usage trends, and evaluating and improving our Websites, Services, Platform and your experience.

Sensitive Personal Data we collect

We do not intentionally collect from you any Sensitive Personal Data. "Sensitive Personal Data" means the various categories of Personal Data identified by applicable data privacy laws as requiring special treatment, including data relating to ethnic origin or race, marital status, political opinions or affiliations, religious or philosophical beliefs, physical or mental health, sexual orientation, genetic data, biometric data, national identifiers, or criminal proceedings or records. We do not ask for this data and we suggest that you do not provide us with Sensitive Personal Data.

Sharing your personal information

We only share and disclose your Personal Data in the following circumstances:

• Service providers, vendors, contractors, and other third parties. We may share your Personal Data with third-party vendors, contractors and service providers who perform services for us or on our behalf. Examples include payment processing, data analysis, email delivery, and hosting services. Third-party data processors that we engage have contractual obligations to keep Personal Data confidential and process it only for the purposes for which we share it.
• Vital interests and legal rights. We may disclose your Personal Data when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, potential threats to safety, or illegal activities.
• Compliance with laws. We may disclose your Personal Data when legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Business transfers. We may share or transfer your Personal Data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Affiliates. We may share your information with our affiliates, who are required to honour this Privacy Policy.
• Protection of assets. We may use or disclose your Personal Data if we reasonably determine it is necessary to protect our rights, operations, or users.
• Business partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• With your consent. We may disclose your Personal Data for any other purpose with your consent.

Securing your Personal Data

The security of your Personal Data is important to us. We have implemented industry-standard technical and organisational security measures designed to protect the security of any Personal Data we collect and process, as well as to prevent unlawful access and accidental loss or damage.

Where you have credentials for access to certain parts of our Websites, Platform or Services, you are responsible for keeping such credentials confidential. We cannot guarantee the absolute security of data that is electronically stored or transmitted over the internet. If we learn of a security breach, we may notify you or others consistent with applicable data protection law.

Cookies and other tracking technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. See our Cookie Policy for details.

a. Email tracking and unsubscribing

Emails we send you may include tracking of whether you have opened or clicked the email. If you want to ensure that none of your email activity is tracked, you should opt out of emails using the unsubscribe link contained within any email we send.

b. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. As no uniform technology standard for recognising and implementing DNT signals has been finalised, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

Social Media Buttons

On the blog pages of our Websites are social buttons that enable users to share or bookmark content. We may include buttons for X (Twitter), LinkedIn, Facebook, and other social media services. In order to implement these buttons, there are scripts from domains outside of onbrief.ai. If you click on these buttons, those third-party companies will register the information.

Customer Testimonials and Quotes

We may publish customer testimonials and quotes on our site or in other marketing materials, which may contain some Personal Data. Prior to publication, OnBrief.ai obtains consent from each customer and the featured individuals. These customers and individuals may withdraw their consent at any time. If you are featured in a customer testimonial or quote and wish to withdraw your consent, please contact us.

Personal Data transferred internationally

Our HQ and servers are located in the UK. By providing us with your Personal Data or otherwise engaging with us through our Websites, Platform or Services, your Personal Data may be transferred to, stored, and processed by us outside the UK, or to our affiliates elsewhere in the world, and by those third parties with whom we may share your Personal Data as described above.

Regardless of where it is processed or stored, we take all necessary measures designed to protect the privacy and security of your Personal Data according to this Privacy Policy and applicable data protection law. For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation), we are a data processor with respect to the Personal Data our customers choose to upload to the Services, and a data controller with respect to all other Personal Data we collect. Where required by law, we have implemented the European Commission's Standard Contractual Clauses for transfers of Personal Data.

How long we keep your Personal Data

We only keep your Personal Data for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer have a legitimate business need to process your Personal Data, we will either delete or anonymise it. If this is not possible (for example, because your Personal Data is stored in back-up archives), we will securely store your Personal Data and isolate it from any further processing until deletion is possible.

Personal Data relating to children

We do not knowingly solicit data from or market to anyone under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from anyone under age 18, please contact us.

Links to other sites

Our Websites may contain links and references to third-party websites, provided for convenience purposes only. Please be aware that this Privacy Policy does not apply to those websites. We cannot guarantee the safety and privacy of Personal Data you provide to any third parties, and we are not responsible for the practices and policies of such third parties. You should review the policies of such third parties and contact them directly to respond to your questions.

Your rights

a. Privacy rights

With respect to your Personal Data, you have the right to:

• Request that we not process, or stop processing, your Personal Data
• Review the Personal Data that we have about you
• Request a correction of any errors in or update of the Personal Data that we have about you
• Request that your Personal Data will not be used to contact you for direct marketing purposes
• Request that your Personal Data will not be used for profiling purposes
• Request that your Personal Data will not be used to contact you at all
• Request that your Personal Data be transferred or exported to another organisation, or deleted from our records
• At any time, withdraw any permission you have given us to process your Personal Data

b. Withdrawing consent

If we are relying on your consent to process your Personal Data, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before your withdrawal of consent.

c. Opting out of email marketing

You can unsubscribe from our marketing email lists at any time by clicking on the unsubscribe link in any email we send. You will be removed from the marketing email lists; however, we may still need to send you emails necessary for non-marketing related purposes.

d. Account termination

You can at any time review or change the information in your OnBrief.ai account, or terminate your account. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

e. Contacting us

To exercise any of the above rights or to make a complaint, please contact us at support@onbrief.ai. We will not discriminate against you for seeking to exercise any of your privacy rights and will consider and act upon any request in accordance with applicable data protection laws. When contacting us, please provide sufficient information to allow us to reasonably verify your identity and describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to it.

f. Submit a complaint

If you still have unresolved issues after contacting us, you may contact your local authority. If you live in the European Economic Area, Switzerland, or the United Kingdom, you may contact your local Data Protection Authority (edpb.europa.eu). If you live in Australia, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

California residents: specific privacy rights

a. CCPA

OnBrief.ai does not generally sell Personal Data to third parties for monetary consideration. As described in our Cookie Policy, OnBrief.ai may share information about your devices with third parties in order to understand how you interact with the Websites and deliver relevant ads. Such information sharing may be considered a "sale" under the California Consumer Privacy Act of 2018. If you are a California resident, you can opt out by:

• Updating your cookie preferences, including a Do Not Sell My Personal Information option, via your Cookie Settings
• Contacting OnBrief.ai via email at support@onbrief.ai

Please note that you must provide enough information to enable us to process your request.

b. "Shine the Light"

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

Updates to this policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice on our Websites or by directly sending you a notification. We encourage you to frequently review this Privacy Policy to stay informed of how we are protecting your information.

Contact us about this Privacy Policy

If you have any questions regarding our Privacy Policy or our collection and use of your Personal Data, or to exercise any of your rights, please contact us at support@onbrief.ai.