Privacy Policy
Effective date: May 10, 2026
The short version.
BarBrief collects only what we need to send you the newsletter and bill you for it: your email, first name, target exam date, your priority subjects (Max only), your timezone, and your payment method (handled by Stripe — we never see your card number). We don't sell your data, we don't share it with advertisers, and we don't use it to train AI models.
1. Who we are
This Privacy Policy describes how [ENTITY NAME, e.g., Claudius Insights LLC], a [STATE] limited liability company doing business as BarBrief ("BarBrief," "we," "us"), collects, uses, and shares information when you use the BarBrief website, our email newsletter, and related services (collectively, the "Service"). For privacy questions, contact us at alex@barbrief.co.
2. Categories of personal information we collect
| Category | Examples |
|---|---|
| Identifiers | Email address, first name, Stripe customer ID |
| Commercial information | Subscription tier, billing status, plan history |
| Internet/network information | IP address, browser/user agent, request timestamps |
| Preferences | Target exam date, priority subjects (Max only), timezone |
| Communications | Support replies, messages you send to us |
| Email engagement | Open and click events from our emails |
Payment information. Your card details are collected and processed directly by Stripe, our payment processor. We never see, store, or have access to your full card number. We receive limited billing and subscription information from Stripe, including your Stripe customer ID, plan tier, subscription status (active, trialing, cancelling, cancelled, past-due), trial start and end dates, renewal date, cancellation status, invoice status, refund status, and limited payment metadata such as the last four digits of your card and its expiration month/year.
Priority subjects and target exam date are used only to personalize your study content and are not sold, shared for advertising, or used to make eligibility decisions.
What we don't collect. We do not use advertising pixels or third-party behavioral advertising trackers. We may use essential cookies, server logs, payment-session cookies, and email engagement tools as described in this Policy. We do not sell or trade your information.
3. How we use your information
We use the information we collect to:
- Deliver the daily newsletter — using your email, name, exam date, timezone, and (for Max subscribers) priority subjects;
- Process payments and manage your subscription — using your email, Stripe customer ID, and subscription metadata;
- Respond to support messages — using your email and the content of your message;
- Improve the Service — using aggregate usage data and email engagement;
- Comply with legal and tax obligations — using billing records.
4. Email communications
Because BarBrief is an email-based service, we use your email address to send you several types of messages:
- The paid newsletter. Daily morning briefs (and, for Max subscribers, evening debriefs and Sunday Performance Test walkthroughs). This is the Service you subscribed to.
- Account and billing notices. Welcome messages, trial-ending reminders, payment receipts, payment-failure notices, and cancellation confirmations.
- Support responses. Replies to questions or concerns you send us.
- Occasional product updates. Notices about new features, edition launches, or material changes to the Service.
Promotional emails. If we ever send promotional or marketing emails (for example, win-back offers or referral campaigns), each one will include an unsubscribe link. You may opt out of promotional messages at any time by clicking that link or emailing us, and we will honor opt-out requests within 10 business days. Opting out of promotional emails does not cancel your subscription or stop the daily newsletter.
The newsletter and account emails. Because BarBrief is an email-based paid service, unsubscribing from the daily newsletter may prevent us from delivering the Service. Transactional and account-related emails (welcome messages, trial-ending reminders, payment receipts, payment-failure notices, cancellation confirmations, and legal or security notices) may still be sent where necessary to manage your account.
If you want to stop receiving the daily newsletter without cancelling your paid subscription, contact us at alex@barbrief.co and we will adjust delivery. To cancel your paid subscription, see Section 4 of our Terms of Service or use the Stripe Customer Portal link in any BarBrief email.
5. Who we share it with
We share information only with the third-party services we use to operate BarBrief:
| Service | What they receive | Why |
|---|---|---|
| Stripe | Email, name, payment method, subscription metadata | Process payments and manage subscriptions |
| Resend | Email address, name, message content | Deliver newsletters and account emails |
| Supabase | All subscriber data (database hosting) | Store subscriber records securely |
| Vercel | IP address, request metadata | Host and serve the website |
| Anthropic | Aggregated or non-identifying content prompts | Generate newsletter content (rules, questions, analysis) |
We use Anthropic to assist with generating educational newsletter content. We do not intentionally send Anthropic subscriber names, email addresses, payment data, or directly identifying information. Where we use subscriber preferences (such as priority subjects) to shape content, we use them in aggregated or non-identifying form where feasible. We do not use subscriber personal information to train AI models.
Each provider has its own privacy policy and data protection commitments. We choose providers that meet industry standards for security and data handling.
We may also disclose information if required by law, court order, or to protect our rights or the safety of others. If a business transfer (acquisition, merger) occurs, your information may be transferred as part of that transaction; we will notify you by email if this happens.
6. How long we keep it
We keep your subscriber data while your account is active. If you cancel, we keep your record for up to 12 months in case you reactivate, then delete it. Billing records are kept for 7 years to comply with tax and accounting laws.
If you request deletion, we will delete or anonymize account data unless we need to retain certain records for legal, tax, accounting, fraud-prevention, dispute-resolution, or security purposes. You may request earlier deletion at any time — see Section 8.
7. How we protect it
We use encryption in transit (HTTPS) and at rest (Supabase database encryption). We restrict administrative access to subscriber data, use password-protected accounts, and enable security features such as multi-factor authentication where available. No system is perfectly secure, however, and we cannot guarantee absolute protection.
If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities where required by applicable law.
8. Your rights
Depending on where you live, you may have the right to:
- Access the information we hold about you;
- Correct inaccurate information;
- Delete your information ("right to be forgotten");
- Export your information in a portable format;
- Object to certain uses, or restrict processing;
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email alex@barbrief.co. We will respond within 30 days (or sooner if required by applicable law).
U.S. state privacy rights
Depending on your state of residence and whether applicable state privacy laws apply to BarBrief, you may have additional rights, including the right to request access, correction, deletion, or a copy of certain personal information, and the right to opt out of certain targeted advertising, sale of personal information, or profiling. BarBrief does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising any privacy rights available to you under applicable law.
California residents
If California privacy law (CCPA/CPRA) applies to our processing of your personal information, California residents may have specific rights, including the right to know, access, correct, delete, and obtain a copy of certain personal information; the right to opt out of sale or sharing of personal information; and the right not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising. We do not collect sensitive personal information beyond what is described in this Policy.
Browser signals. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not currently respond differently to "Do Not Track" or Global Privacy Control signals. Where legally required, we will honor applicable opt-out preference signals.
Users outside the United States
If you are located in the European Economic Area, the United Kingdom, or Switzerland, additional rights may apply to you. We process your personal information as a controller on the legal bases of contract (to deliver the Service you subscribed to), legitimate interests (to operate, secure, and improve the Service), consent where applicable, and legal obligation (to comply with tax and accounting laws). You may have rights to access, correct, delete, restrict, object to, or port your personal information, and to lodge a complaint with your local data protection authority.
Some of our service providers may process personal data outside your country, including in the United States. Where required by EU, UK, or Swiss data protection law, we rely on appropriate safeguards for these transfers, such as the European Commission's adequacy decisions, Standard Contractual Clauses, or equivalent contractual protections offered by our providers.
9. Children
BarBrief is not directed to children under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, please contact us and we will delete it.
10. Cookies and email tracking
BarBrief uses only the minimum cookies necessary for the website to function (e.g., a session cookie during the Stripe Checkout flow). We do not use advertising or behavioral tracking cookies.
Our emails may include technologies that tell us whether an email was opened and whether links were clicked. We use this information to understand whether the newsletter is useful, improve content quality, troubleshoot delivery issues, and manage the Service. If you prefer not to be tracked at all, you can disable image loading in your email client, which prevents most email open tracking.
11. Changes to this Policy
We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email at least 14 days before the change takes effect. The updated Policy will apply from the effective date stated in the notice. Where required by applicable law, we will seek your consent before applying material changes to how we use your personal information.
12. Contact
Questions or concerns about your privacy? Email alex@barbrief.co. We review privacy requests sent to this address and respond within the timeframe required by applicable law.