Briifin is operated by OÜ T8D in Estonia. This policy explains what we collect, why we use it, and the choices you have.
What This Covers
This policy applies to the Briifin website, product, beta access, and related communications. It does not cover third-party websites, procurement portals, identity providers, or other services linked from Briifin.
Data We Collect
- Contact details you submit, such as your email address.
- Account and authentication data if you use the app, including identity-provider details such as Microsoft Entra ID.
- Product settings, saved views, filters, statuses, and activity needed to run the service.
- Technical data such as device, browser, logs, performance, security, and error information.
- Public opportunity and source data from registers, portals, public pages, and related source material.
How We Use Data
We use data to provide the website and app, secure accounts, remember preferences, capture early-access interest, support users, improve source coverage, classify and summarize opportunities, and monitor reliability and misuse.
Legal Bases
Where GDPR applies, we rely on contract, legitimate interests, consent where required, and legal obligations. Our legitimate interests include operating Briifin, improving relevance, securing the service, and communicating with people who ask to hear from us.
AI, Summaries, And Matching
Briifin may use AI-assisted systems to classify opportunities, generate summaries, create tags, rank relevance, and support matching. These outputs help with triage. They are not legal, procurement, financial, or bidding advice, and official source documents remain authoritative.
Cookies And Storage
We use cookies and similar storage for authentication, security, preferences, analytics, diagnostics, and performance. Where non-essential cookies require consent, we ask for it before using them.
For website analytics, we may use privacy-friendly tools such as Plausible to understand aggregate traffic and conversion events without sending email addresses or other form contents to analytics.
Sharing And Hosting
We share data only where needed to operate Briifin, including with hosting, authentication, database, logging, monitoring, email, analytics, AI, support, and professional service providers. Infrastructure may include Microsoft Azure, Entra ID, Azure Monitor, Application Insights, Azure OpenAI, Cosmos DB, Blob Storage, and Functions.
International Transfers
We aim to process data in the EEA where practical. If data is transferred outside the EEA, we use appropriate safeguards such as standard contractual clauses or equivalent protections.
Retention
We keep personal data only as long as needed for the purpose collected, including service operation, security, legal, tax, accounting, or dispute needs. Early-access emails are kept until they are no longer useful or you ask us to remove them.
Security
We use reasonable technical and organizational safeguards, including access controls, least-privilege practices, encryption in transit, cloud security controls, monitoring, and separation between development and production where appropriate.
Your Rights
You may have rights to access, correct, delete, restrict, object to, or port your data, withdraw consent, object to marketing, and complain to the Estonian Data Protection Inspectorate or your local supervisory authority.
Contact
For privacy questions, email info@briifin.com.