Privacy policy

When Supabase auth is enabled, we store your account email and remaining briefing credits in our database. Sign-in uses a one-time email link; we do not store passwords.

If auth is not configured, Debrief falls back to a lightweight session in your browser (email you enter, credits, and past verdicts in localStorage). That mode is for local development only.

When you run a briefing, we send the idea text to model providers (OpenAI, or Google Gemini when you bring your own key) and search providers (if configured SerpApi, Exa, Tavily, Firecrawl) to produce the report. We do not sell your ideas.

You can save your own model API key (OpenAI or Google Gemini) in this browser. We send that key with the briefing request so the agents run on your account, and we do not store it on our servers. Remove it from the briefing form to stop sending it. Live search still uses Debrief's own search providers.

Buying briefings sends you to Dodo Payments checkout. We store the payment id with your account so the same payment cannot add credits twice. Card details stay with Dodo.

Server logs may include IP addresses used for rate limits. Do not submit secrets, personal data about other people, or confidential third-party material.