1. Who we are
changebrief is operated by Kristian Wigander as a sole proprietorship based in Sweden. Contact: kristian@changebrief.io.
2. What data we collect
- Account data: Email address, name, and profile image from your OAuth provider (Google or GitHub).
- Monitoring data: URLs you add, screenshots of those pages, AI-generated change summaries, and your review actions.
- Usage data: Basic analytics (page views, feature usage) to improve the service. No third-party trackers.
- Payment data: Handled entirely by Polar/Stripe. We never see or store your card details.
3. How we use your data
- To provide the monitoring service (screenshots, AI analysis, notifications).
- To send you email notifications and digest reports you have opted into.
- To improve the service based on aggregated, anonymized usage patterns.
We do not sell, rent, or share your data with third parties for marketing purposes.
4. Third-party processors
- OpenAI — AI analysis of screenshots (images sent via API, not stored by OpenAI per their data usage policy).
- Turso — Database hosting (EU, AWS eu-west-1, Ireland).
- Vercel — Application hosting (edge network, EU-first routing).
- Resend — Transactional email delivery.
- Polar/Stripe — Payment processing.
5. Data storage & security
All data is stored within the EU (AWS eu-west-1, Ireland). Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to the service operator.
6. Your rights (GDPR)
You have the right to:
- Access — Request a copy of all data we hold about you.
- Rectification — Correct inaccurate data.
- Erasure — Request deletion of your account and all associated data.
- Portability — Export your data in CSV format (available in the dashboard).
- Object — Object to processing of your data.
To exercise any of these rights, contact kristian@changebrief.io. We respond within 30 days.
7. Data retention
Change history is retained according to your plan (7 days to 1 year). When you delete your account, all data is permanently removed within 30 days.
8. Cookies
We use only essential cookies: authentication session, language preference, and theme preference. No advertising or tracking cookies.
9. Changes to this policy
We may update this policy occasionally. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.