Back

Privacy policy

Last updated: August 14, 2026

This notice explains what personal data Briefetch collects, why, how long it is retained, and how to request deletion, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

Briefetch is published and marketed by Kenan Colombien (see legal notice for full identification). For any question about this policy or to exercise your rights, use our contact form.

2. Data collected

  • Agency account (owner): email and password via Supabase Auth. Company name and, optionally, WhatsApp number used for reminders.
  • Project client: no account, no password. Access is via a magic link (unique token) limited to that project only. Only their email may be stored by the agency owner for reminder emails.
  • Uploaded files: files a client uploads for a project (name, size, date, file content).

3. Purposes and legal basis

This data is processed to manage projects and collect items requested from clients (performance of the contract between the agency and Briefetch), and to send automated email reminders or manual WhatsApp links (legitimate interest of the agency in moving projects forward).

4. Sub-processors

  • Supabase (database and agency account authentication).
  • Cloudflare R2 (storage of client-uploaded files).
  • Resend (automated reminder emails).
  • Vercel (application and serverless hosting).

No data is sent to the WhatsApp Business / Meta API: the WhatsApp reminder button simply opens a manual conversation from the agency owner's device.

5. Retention period

Project files are automatically deleted from storage 90 days after the project is marked « completed », and the project is then archived. The agency owner can also request immediate deletion of a project's files at any time from the project page.

6. Your rights

You have the right to access, rectify, delete, and port your data, as well as the right to object to processing. To exercise these rights, use our contact form. You may also lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be) or the French CNIL (cnil.fr).

Privacy policy ⸱ Briefetch