Privacy Policy

1. Introduction

Briefico ("Briefico", "we", "us") is a Facebook group marketing automation platform for agencies and marketers. Briefico is the registered trade name of מולוצ'ניקוב גוזל, a sole trader (exempt dealer, עוסק פטור) registered with the Israel Tax Authority and based in Yokneam Illit, Israel. You can reach us at guzel@briefico.com. This policy describes exactly how we handle your data.

This policy covers Briefico's Facebook-group automation: the web app at app.briefico.com and the Briefico Poster Chrome extension. The Briefico CRM (crm.briefico.com) is a separate product with its own privacy policy.

Visiting briefico.com.The website sets no cookies and runs no analytics or advertising trackers. It is hosted on Cloudflare Pages, which, like any web host, receives your IP address and browser details to deliver the page. Our font (Inter) is loaded from Google Fonts, so Google also receives your IP address. The accessibility toolbar saves your display preferences in your own browser's local storage; they never reach us. The download page asks our storage provider, Supabase, for the latest app version. The contact form sends nothing to us itself — it opens a message in your own email app.

2. Data We Collect

• Account data — email address, password (handled by our authentication provider, Supabase — we never see or store your raw password), organization membership, and role (admin, creator, or publisher).
• Campaign & content data — post text, images, group lists, and schedules you create in the web app.
• Facebook group content, while posting— the Poster extension reads the group's post composer to publish your content and confirm it went through. It only interacts with what's already visible to you as a group member — nothing private, nothing hidden.
• Usage & log data — technical logs of posting tasks (timestamps, success or failure status, error messages) used to keep the service reliable and to support you if something goes wrong.
• A picture of the page when a post fails— if a post can't be published, the Poster extension draws a picture of the visible part of the Facebook page it was posting on and reads the titles and buttons of any Facebook window that was open, and sends both to Briefico, so you and our support can see what went wrong. The picture shows what that tab showed, which can include posts and names in the group. Only your organization's admins and Briefico support can see it, and it is deleted after 7 days.

3. Data We Don't Collect

• We never store your Facebook password. The Poster extension works inside your own already-logged-in Facebook session in your browser — we never see or handle your Facebook credentials.
• Briefico never joins Facebook groups automatically. You join groups yourself; only then do they become available to manage in Briefico.
• We don't collect private messages, private profile data, or anything not already visible to group members.

4. How We Use Data

We use the data above to:

• Operate the service — authenticate you, run your campaigns, assign and track posting tasks.
• Generate AI-based category and engagement insights for the Facebook groups you manage.
• Communicate with you about your account or in response to your inquiries.

5. Lead Finding (optional)

Lead finding is off unless you turn it on, in the Briefico Poster extension or in the Briefico desktop app. It helps businesses that use Briefico find people who publicly ask, in Facebook groups, for a service those businesses offer. When you turn it on:

• What is read. Only while a Facebook group page is open in your browser, the extension looks at the group posts Facebook has already sent to your browser. Nothing is read from your home feed, profile, messages or notifications, and it never scrolls, clicks or opens anything on its own.
• What is sent to Briefico.For each group post: its text, a link to it, when it was posted, the group it is in, its reaction, comment and share counts, and a one-way hash of the author's profile link (used only to tell posts by the same person apart). The author's name and profile link are never sent. Plus simple counters, such as how many posts were seen.
• Where it is processed.On Briefico's server. Each post is judged by an AI model (Xiaomi MiMo, see Third-Party Processors) against the descriptions of the businesses that use lead finding, to decide whether it is a lead for any of them. Nothing about posts is checked on your computer.
• Drafting your business profile.If you ask us to, Briefico's server reads up to 20 public pages of your business's website, or takes the description you write, and sends that text to an AI model (Xiaomi MiMo) to draft the list of what your business offers. You review and edit the draft before anything is saved. We keep a draft for 30 days, and the profile you save for as long as your lead finding configuration exists.
• Who it is for. Matches can be for any business that uses Briefico, not only yours: many computers together cover more groups than any one business could.
• The people who wrote the posts.We process the posts on the basis of legitimate interest — helping a business answer someone who publicly asked, in a group, for its kind of service. We keep a post's text, link, time and group, and the AI's judgement of it, for 365 days, and use them only for lead finding and to make it more accurate — never for advertising. Anyone can ask us to delete everything we hold about their own post: send the post's link to guzel@briefico.com.
• Your computer. If you turn on the AI model in the desktop app, it downloads it once (about 1.7 GB) and uses up to about 2 GB of memory while it runs, at low priority. The model is Gemma, provided under and subject to the Gemma Terms of Use, and turning lead finding on includes agreeing to Google's Gemma Prohibited Use Policy. The model runs locally; Google receives nothing from it.
• Turning it off. Switch it off in the extension or the desktop app at any time. Collection stops at once on that computer, posts not yet sent are discarded, and our server no longer accepts posts from it.

6. Third-Party Processors

We rely on a small number of infrastructure providers to run Briefico, listed below. We only share data with these providers, and with law enforcement if legally required — never for advertising, and never by selling or renting it to anyone.

7. Cookies & Tracking

The briefico.com website sets no cookies (see the Introduction). app.briefico.com uses only essential session cookies from our authentication provider, needed to keep you signed in — nothing used for advertising or cross-site tracking.

8. Chrome Extension Permissions

Here is exactly why each extension asks for the permissions it does:

9. Data Retention

• Account and campaign data is kept for as long as your account is active. If you ask us to delete your account, we'll delete it within 90 days.
• Task activity logs (what was posted, when, and whether it succeeded) are automatically purged after 90 days.
• Pictures and window text from failed posts are automatically deleted after 7 days.
• Lead finding data (group posts, the AI's judgement of them, and leads) is deleted after 365 days, and post fingerprints after 30 days. See Lead Finding.

10. Your Rights

Under GDPR and Israel's Privacy Protection Law, you can ask us to access, correct, delete, or export your data, or object to how we use it. Contact guzel@briefico.com and we'll respond as quickly as we can.

11. Children's Privacy

Briefico is a business tool, not directed at children. We don't knowingly collect data from anyone under 16.

12. International Data Transfers

Our infrastructure providers may process data outside your home country. Where that happens, we rely on our providers' own compliance safeguards (such as Standard Contractual Clauses) for cross-border transfers.

13. Security

• All traffic is encrypted in transit via HTTPS (Let's Encrypt certificates).
• Our database enforces row-level security so one organization's data is never visible to another.
• We never store Facebook credentials, as described above.

14. Changes to This Policy

We may update this policy as Briefico changes. We'll update the "last updated" date above when we do — check back occasionally.

15. Contact

Questions about this policy or your data? Reach us at guzel@briefico.com. Briefico currently operates out of Israel.