Privacy

Your notebook is yours. We do not sell it, mine it, or train anything on it. No assistant reaches it until you connect one, and you can disconnect at any time. If you want it all gone, ask and it goes.

• Your email address, so you can sign in and so we can send you a confirmation or password-reset link. If you sign in with Google, we receive your email address and name from Google — never your Google password.
• What you write — projects, tasks, steps, prompts and the notes on how work went.
• A record of changes: who changed what, and when. That record is what lets you see which assistant touched which task. It is kept and not rewritten.
• Ordinary server logs kept briefly by our hosting provider, which may include your IP address.

• No advertising, and no selling or renting your information.
• No tracking pixels, no advertising cookies, no analytics following you around. The only cookie we set is the one that keeps you signed in.
• We do not use your notes to train AI models, and we do not give them to anyone to train on.

This is the part worth reading twice, because it is the part where your notes leave our systems on purpose.

When you connect an assistant — Claude, ChatGPT or another — you are asked to approve it on a screen that lists what it can do. Once approved, that assistant can read your notebook and add to it. It only ever sees your own notebook, never anyone else’s.

What that assistant then does with what it reads is governed by the company that makes it, under their terms and privacy policy, not ours. We cannot control or see inside their systems. Connect assistants you are willing to show your work to.

An assistant can add tasks and mark them done. It cannot delete anything. It can archive something if you ask it to in that conversation, and archived things can be brought back. Every change it makes is recorded with its name against it, and you can read that history at any time.

You can withdraw an assistant’s access whenever you like, from the assistant’s own settings. Doing so stops any further access immediately.

We use a small number of established companies to run the service. They process data on our behalf and only to provide their part of it:

• Supabase — the database and sign-in system. Your notes live here, in the United States.
• Vercel — hosting for the website itself.
• Cloudflare — the domain name and email forwarding.
• Google — only if you choose to sign in with Google.
• Resend — sending the confirmation and password-reset emails.

Your notes are stored in the United States. If you are elsewhere, using PassTheBrief means your information is transferred there.

Everything travels over an encrypted connection and is encrypted where it is stored. Separation between notebooks is enforced by the database itself rather than by application code — the database will not return another account’s rows even if our own code asks it to.

No system is perfect, and we will not pretend otherwise. If something goes wrong that affects you, we will tell you.

Your notes stay until you remove them. Archived projects and tasks are hidden but kept, so you can recover them; they are deleted when you delete them or close your account.

Ask us to close your account and we will delete your notebook and your sign-in details. The record of changes goes with it.

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Write to hello@passthebrief.com and we will act on it. Depending on where you live you may have further rights under local law; tell us what you need and we will honour it.

PassTheBrief is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will remove it.

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, tell account holders by email rather than quietly editing the page.