Privacy notice

1. Who is responsible

BriefTogether (brieftogether.com) is operated by Roas Digitall Danışmanlık E-ticaret İth. İhr. ve Ltd. Şti., Kazım Dirik Mah. 296/2 Sk. No:33, Bornova, İzmir, Türkiye (“we”). Contact for privacy questions and requests: hello@roasdigitall.com.

2. What data we process

• Account: e-mail address, name of the person or brand, account type (brand, creator, agency), language, e-mail notification setting. If you sign in with Google we receive your name and e-mail address from Google.
• Profile (only what you enter): about text, category, location, portfolio link, languages, platforms, starting fee, sample video links.
• Campaigns and collaborations: campaigns with their terms, applications with pitch and proposed fee, invitations, messages, delivered files or links, feedback, shipping status and tracking number, ad-access codes you share, and your confirmations (usage terms accepted, advertising disclosure, product received).
• People invited by a brand: a brand can enter names and e-mail addresses of creators it already works with. We use them only to send one invitation and, if the person joins, to link the profile to that brand’s list.
• Brief Studio: the product description, selections and product link you enter. Drafts are saved in your account.
• Technical data: IP address and request data in server logs; error reports (error message, page, browser type, country; never passwords or message text); for the free tools a one-way, salted hash of the IP address used only for rate limiting (kept for about a day); a record that a notification e-mail was sent (type and time).

3. Why we process it and on what basis

• To provide the account and the workspace (sign-in, campaigns, applications, messages, deliveries, notifications). Basis: performance of a contract (Art. 6(1)(b) GDPR; Art. 5(2)(c) KVKK).
• To keep the service secure and working: error alerts, rate limiting, abuse prevention, availability checks. Basis: our legitimate interest (Art. 6(1)(f) GDPR; Art. 5(2)(f) KVKK).
• To measure how the site is used with Google Analytics. Measurement with cookies only if you accept it in the cookie banner (basis: your consent, Art. 6(1)(a) GDPR, § 25(1) TDDDG; Art. 5(1) KVKK). Without a choice only anonymous, cookie-free measurement runs (basis: our legitimate interest, Art. 6(1)(f) GDPR); if you decline, measurement is switched off for you.
• To show your public profile or campaign page, only if you switch it on. Basis: your consent (Art. 6(1)(a) GDPR; Art. 5(1) KVKK). You can switch it off at any time in Settings.
• To meet legal duties and to establish, exercise or defend legal claims. Basis: legal obligation and legitimate interest.

4. Who receives data

Other users see what is needed for a collaboration: a brand sees a creator’s profile, application and deliveries; a creator sees the brand’s campaign and messages. Anything you publish on a public page is visible to everyone. We also use service providers that process data on our behalf:

• Cloudflare (hosting, database, network security and server logs).
• Supabase (sign-in and account verification).
• Resend (delivery of sign-in and notification e-mails).
• OpenAI (writes the draft in Brief Studio from the product information you enter).
• Google (Google sign-in, only if you choose it; Google Analytics (loaded on every page; cookies and identifiers only with your consent), with data kept as configured in our account for at most 14 months; Google Fonts, which loads our typefaces and therefore receives your IP address when a page opens).

5. Transfers abroad

Some of these providers process data in the USA or other countries. We rely on the safeguards the law provides for this, such as the EU–US Data Privacy Framework and standard contractual clauses.

6. Cookies and browser storage

The service itself only needs the items below, which do not require consent. We do not use advertising cookies. Google Analytics is loaded on every page in a restricted mode: until you accept it in the banner it sets no cookies and uses no identifier, and if you decline it is switched off for you.

• Session cookies (names start with “sb-”) keep you signed in.
• Short-lived cookies (“bt-next”, “bt-join-role”, “bt-ref”, about one hour) remember where to continue after sign-up and which invitation you followed.
• Browser storage on your device holds your language, saved creators, a brief you hand over from the free tools and your cookie choice.
• Only with your consent: Google Analytics 4 sets the cookies “_ga” and “_ga_…” (up to 2 years) and measures page views, the pages you visit, approximate location, device and browser. Without consent it measures only anonymously and without cookies. You can change or withdraw your choice at any time with “Cookie settings” in the footer; withdrawing deletes these cookies.

7. How long we keep data

Account and collaboration data stay while your account exists. When you ask us to delete your account we delete or anonymise it within 30 days, unless the law requires us to keep something or it is needed to resolve a dispute. Error reports are deleted after at most 90 days; rate-limit hashes after about a day. Server logs follow the hosting provider’s retention.

8. AI in Brief Studio

Brief Studio sends the product information you enter to OpenAI to write a draft. Please do not enter confidential customer data or personal data of third parties. You review and edit every draft; nothing is sent to creators automatically and no decision with legal effect is made by AI.

9. Your rights

You can ask us for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on our legitimate interest or withdraw consent at any time. Write to hello@roasdigitall.com. You also have the right to complain to the data protection authority of your country of residence.

10. Security and age

Connections are encrypted (HTTPS), accounts are separated by role and access to data is limited to what each person needs. BriefTogether is for people aged 18 and over.

11. Changes

We update this notice when the product or the law changes.