Legal
Privacy Policy
How BriefScroll handles account data, reading sources, saved items, highlights, notes, AI requests, and beta support.
Last updated: 2026-06-07
Beta status
This policy is a first-pass draft for a US private beta. Replace TODO legal entity, TODO address, and TODO privacy email before public launch.
This page describes intended product practice; it is not legal advice and should be reviewed by counsel before paid public launch.
Information we collect
BriefScroll may collect the following categories of information:
- Account data, such as user id, email address, auth status, settings, and language preference.
- User content, such as source URLs, OPML imports, saved article data, newsletters, PDFs, highlights, notes, search questions, and AI prompts. BriefScroll may also keep bounded shared extraction-cache copies of public article text so repeated saves of the same URL do not repeatedly fetch the source page.
- Usage, diagnostics, security events, device/browser metadata, and product events needed to operate and improve the service.
- Billing state when subscriptions are enabled. Clerk Billing and Stripe process payment details; BriefScroll stores plan, renewal, invoice, and cancellation status rather than raw card numbers.
- Support, privacy, billing, and beta feedback messages.
How we use information
- To provide the reading app, source fetching, bounded public article extraction caching, summaries, search, notes, and highlights.
- To personalize the feed, reader, search, digest, and settings.
- To secure the service, prevent abuse, debug issues, and measure reliability.
- To process subscriptions, invoices, renewals, cancellations, and support.
- To meet legal duties and enforce terms.
AI providers
BriefScroll may send article text, saved content, queries, and related context through Cloudflare AI Gateway to model or embedding providers so it can create summaries, claim checks, article tags, key terms, search results, and answers.
Provider choices and retention terms must stay reflected on the subprocessor page. Private user content should not be used for model training unless the policy is updated and the provider arrangement allows it.
Personalization and profiling
To personalize ranking, BriefScroll builds a per-user picture of your reading taste from your own activity: which articles you highlight, note, save, open, how long you read, how far you scroll, and which ones you skip or mark as not interested.
This profile is built only from your own activity, stays in BriefScroll's own database, and is never sold, used for advertising, or used to compare you against other users. Each personalized article shows why it was ranked for you.
You can turn personalization off or reset your recommendations in Settings, which clears the taste profile and explicit more/less recommendation settings. Engagement events used for ranking are kept only as long as needed and then aged out; deleting your account removes them.
How we share information
BriefScroll may disclose information in these limited cases:
- With service providers such as Clerk, Cloudflare, Neon, AI providers through AI Gateway, discussion metadata providers, Stripe, and future email providers.
- To comply with law, protect rights, investigate abuse, or protect safety.
- With your consent or at your direction.
- BriefScroll does not sell personal data or share it for third-party advertising.
- Discovery, aggregate pages, and public article links use public or article-derived content only, not private libraries. Shared article links may show article metadata and readable text to anyone with the link, never notes, highlights, identity, search questions, collections, or reading progress.
Retention and deletion
BriefScroll keeps account and library data while the account is active, unless you delete specific items or request deletion. Account deletion should remove user rows and user-owned stored bodies where the product supports it. Shared public article extraction-cache entries are bounded by freshness and hard-expiration rules and do not include private imports, highlights, notes, or search questions.
Backups, logs, security records, and billing records may be retained for a limited time where needed for security, legal, accounting, or abuse-prevention reasons.
Privacy rights
You may request access, export, correction, or deletion by using in-product controls where available or contacting TODO privacy email.
California privacy rights are described conservatively here, but this draft does not claim that BriefScroll currently meets California privacy-law thresholds. EU and UK users are not actively targeted in this beta; contact us if you need region-specific review.
Children
BriefScroll is not for children under 13. Users who are 13 to 17 may use it only with parent or guardian consent. If we learn that a child under 13 provided personal data, we will delete it when reasonably possible.
Security
BriefScroll uses reasonable technical and organizational safeguards, including scoped database access, service-provider controls, and abuse limits. No internet service can be guaranteed fully secure.
Contact
Send privacy requests to TODO privacy email. Replace this placeholder before public launch.