Privacy Policy
Last updated: July 2026.
1. Who we are and what this policy covers
This Privacy Policy explains how Debriefed collects, uses, and protects information when you create a share, open a share, or otherwise use the Debriefed website and application (the "Service"). Debriefed is operated by the reorganization LLC, a company registered in the State of Wyoming, United States, with its registered address at 30 N Gould St Ste N, Sheridan, WY 82801. In this policy, "Debriefed," "we," "us," and "our" refer to that entity. "You" refers to anyone who uses the Service, including senders who create a share and recipients who open one.
By using Debriefed, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
2. Information we collect
What we collect depends on how you use Debriefed. The table below summarizes each category.
| Category | What it includes |
|---|---|
| Document and conversation content | The document you upload or the AI conversation you paste when you create a share, along with the brief and citations we generate from it. |
| Questions and answers | The questions a recipient asks about a share, the AI-generated answers to those questions, and the citations tied to those answers. |
| Creator email | The email address you provide when you create a share. We collect this for accountability and to deter abuse. It is not shown to recipients of the share. |
| Account information | If you register for a Debriefed account, your account email address and a hashed version of your password. We never store your password in plain text. |
| Session cookie | A cookie that keeps a registered sender signed in. See "Cookies" below. |
| IP address and request metadata | The IP address and basic technical details of requests made to Debriefed, such as timestamps and browser type, used for rate limiting and abuse prevention. |
| Share receipts | A record of when a share link is opened and what questions were asked against it, so senders have visibility into engagement and so we can keep the Service secure. |
Recipients are not required to create an account or provide any personal information to open a share and read the brief. If a recipient asks a question about a share, that question, along with the associated IP address and request metadata, is sent to us as described above.
3. How we use this information
We use the information described above to:
- Generate the one-page brief for a share and answer the questions recipients ask, with answers cited back to the source document.
- Operate, maintain, and secure the Service, including detecting and preventing abuse, fraud, and excessive use.
- Enforce the expiry and access settings a sender chooses for a share.
- Communicate with account holders about their account, their shares, and changes to the Service.
- Comply with legal obligations and enforce our Terms of Service.
4. The AI provider and other processors
To generate a brief and to answer questions asked against a share, the associated document or conversation content is transmitted to Anthropic, a third-party AI provider, through their API. Anthropic acts as a processor for this purpose: they process the content solely to produce the brief and the answers we return to you, and, to the best of our knowledge based on their published policies, content submitted through their API is not used to train their models. We encourage you to review Anthropic's own privacy and data usage terms directly for the most current and authoritative description of how they handle API content.
We also rely on other processors to run Debriefed, including cloud hosting providers that store and process data on our behalf, and a content delivery network that serves the Service quickly and reliably. These providers act only on our instructions and only to the extent needed to provide their service to us.
5. Sharing and disclosure
We do not sell your personal information. We share information only in the following circumstances:
- With the processors described above, so they can help us operate the Service.
- If required to do so by law, regulation, legal process, or a valid request from a public authority.
- To protect the rights, property, or safety of Debriefed, our users, or others, including to investigate or enforce our Terms of Service.
- In connection with a merger, acquisition, financing, or sale of assets, in which case we would require the new owner to honor this policy for information collected before the transaction.
6. Retention and deletion
Debriefed is built around links that expire rather than permanent storage. When a sender creates a share, they choose how long it stays available, anywhere from one day up to forever on paid plans. A document and its associated data, including the brief, citations, questions asked, and answers given, are deleted when the share reaches its chosen expiry or when the sender revokes the link, whichever happens first.
Creator email and account information for registered senders are retained for as long as the account is active, and are deleted or anonymized within a reasonable period after account deletion, except where we need to keep limited records to comply with a legal obligation, resolve a dispute, or enforce our agreements. IP address and request metadata collected for rate limiting and abuse prevention are retained for a limited period and then deleted or aggregated so they no longer identify you.
7. Security
We take reasonable technical and organizational measures to protect the information we hold. Share links use long, randomly generated tokens that are not guessable or sequential, so opening a document requires the specific link rather than just an account. All traffic to Debriefed is encrypted in transit using HTTPS. Passwords for registered accounts are hashed and are never stored or logged in plain text. Access to production data is restricted to what is needed to operate the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it if it is inaccurate, and request that we delete it. Where applicable law provides for it, you may also have the right to object to certain processing or to receive a copy of your information in a portable format. To exercise any of these rights, contact us using the details in the "Contact" section below. We may need to verify your identity before acting on a request, and some requests may be limited where we have a legal basis to retain information, such as an unresolved dispute or a legal obligation.
9. Cookies
Debriefed uses a session cookie to keep registered senders signed in between visits. This cookie is necessary for the account feature to work and is not used for advertising. We keep tracking on Debriefed to a minimum, and we do not use third-party advertising trackers or sell information to ad networks. If we add analytics in the future to understand how the Service is used, we will update this policy to describe what we collect and why.
10. Children
Debriefed is not directed to children under 16, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.
11. International data transfers
Debriefed may process and store information in the United States. If you access the Service from another location, your information may be transferred to, and processed in, a country with different data protection laws than the country where you live. Where required by applicable law, we take steps intended to ensure that information transferred internationally receives an appropriate level of protection.
12. Changes to this policy
We may update this Privacy Policy from time to time as Debriefed evolves. When we make changes, we will update the date at the top of this page. If a change is material, we will make reasonable efforts to notify account holders, such as by email or a notice on the Service. Continued use of Debriefed after a change takes effect means you accept the updated policy.
13. Contact
Questions about this policy, or requests relating to your information, can be sent to [email protected].