Privacy Policy

We collect the following categories of information:

• Account information. The email address you use to sign in, and any identifier associated with that account.
• User-uploaded files. CSV files you upload (for example, Google Ads campaign exports), the text content of those files, and any context you attach.
• Advertising-platform data. When you connect a Google Ads account, we read campaign-, ad-group-, keyword-, ad-, asset-, and conversion-level performance data from that account via the Google Ads API, strictly read-only.
• Service interactions. Messages you send to the analysis agent, approve/reject decisions on recommendations, and timestamps of those interactions.
• Operational data. Standard server and application logs (request paths, error traces, latency) necessary to operate and debug the Service.

We use information only to:

• Operate the Service — read the data you provide, generate structured analyses, present them in the dashboard, and preserve them across sessions.
• Send the contents of your inputs to our analysis providers (see "Third-party providers" below) so they can be processed into a report.
• Improve the Service — diagnose errors, evaluate output quality, and refine prompts and heuristics. Improvement work is performed on data internal to DSMedia.
• Communicate with you about the Service, including security or policy changes.

We do not sell personal information. We do not use your advertising or campaign data to target advertising to anyone. We do not share your data with anyone except the third-party providers listed below, and only as needed to run the Service.

When connected to a Google Ads account, Brief uses the Google Ads API to read advertising data on the operator's behalf. Brief does not autonomously modify, create, update, pause, enable, or delete anything in your Google Ads account. Any change to your account is carried out by the Service only as a direct response to the operator's two-step authorization (approval of the specific recommendation, followed by separate confirmation to execute), and only to the extent and within the parameters described in that recommendation.

Brief's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements.

We rely on the following providers to operate the Service. Each receives only the data necessary for its function.

• Anthropic— provides the large-language-model analysis (Claude). Your CSVs, agent messages, and connected account data are sent to Anthropic's API for processing.
• Supabase — provides authentication, database, and file storage. Your account credentials, files, and generated reports are stored here.
• Vercel — hosts the application and serves HTTP requests.
• Google — Google Ads API for reading advertising data when you connect a Google account.

We retain your uploaded files, generated reports, agent messages, and decision history for as long as your account is active. You may request deletion of any of the above by contacting dev@dsmedia.co.il. On account closure we delete your data within 30 days, except where we are legally required to retain it.

Depending on your jurisdiction, you may have the right to access, correct, port, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise any of these rights, write to dev@dsmedia.co.il. We respond within 30 days.

We use industry-standard transport encryption (TLS) for all connections, store credentials hashed where applicable, and apply access controls to internal systems. No system is fully secure; if we become aware of a breach affecting your data we will notify you without undue delay.

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page, and for material changes will provide additional notice (for example, by email).

Questions about this Privacy Policy can be sent to dev@dsmedia.co.il.