1. Who we are
Brief.center is operated by a Romanian company and acts as data controller for personal data processed through the platform.
For privacy requests, contact contact@brief.center.
2. What data we collect
We collect account information (name, email, role, profile data), usage data (actions, logs, interactions), payment-related data via Stripe, and technical data such as IP addresses.
We only collect data that is relevant to platform operation, compliance, and security.
3. Why we collect it
Data is processed to provide marketplace services, execute contracts, process payments, enforce platform rules, and comply with legal obligations.
4. Legal basis
Under GDPR Article 6, processing is based on contract necessity, legitimate interest, and consent where applicable.
5. Data sharing
We share data with service providers required to operate the platform, such as Supabase/hosting and Stripe for payments.
We do not sell personal data to third parties.
6. Data retention
Account data is kept for the duration of the account plus 2 years.
Payment records are retained for 5 years to meet legal requirements.
7. Your rights
You may request access, rectification, erasure, portability, or objection where legally applicable.
You can also contact the Romanian DPA: www.dataprotection.ro.
9. Security measures
We implement technical and organizational controls including access restrictions, audit logs, and secure infrastructure providers.
10. Changes to this policy
We may update this Privacy Policy as our services or legal obligations change. Significant updates will be communicated in-product or by email.
11. Contact
For privacy questions: contact@brief.center. DPO contact is available if and when appointed.
