Who is responsible for your information
Brilyze is the controller of personal information used to operate the Brilyze service. Questions and data-rights requests can be sent to [email protected].
This notice applies to the public website, Free, Basic, Pro, account and profile areas, support interactions and associated service communications.
Information we collect
- Account data: email address, password hash, verification status, plan, language, preferences and account identifiers.
- Creative inputs: ideas, briefs, scripts, audio, videos, project settings, objectives, audience information and the instructions you submit.
- Results and workspaces: analyses, generated text, corrections, comparisons, saved projects, PDFs and your choices about what to retain.
- Technical and security data: session identifiers, IP-related request information, timestamps, device or browser signals, rate-limit events, login attempts, errors and restricted-content category events.
- Support and transaction data: messages you send to support and, when billing launches, plan, payment status, invoices and limited payment references. Brilyze should not receive your full card number from the payment processor.
Why we use it and our legal bases
| Purpose | Information | Legal basis |
|---|---|---|
| Create and operate your account; deliver analyses, projects and exports | Account, creative input and result data | Performance of our contract with you |
| Secure accounts, prevent abuse, diagnose errors and protect service capacity | Technical, session, security and minimal moderation events | Legitimate interests in operating a safe and reliable service; legal obligation where applicable |
| Keep a video for no more than 30 days solely to improve the Brilyze model | The specifically authorised video and its account reference | Your explicit, optional consent given by ticking the separate box for that analysis |
| Respond to support requests and complaints | Account, support and relevant service records | Contract and legitimate interests in resolving issues |
| Administer payments when enabled and meet accounting duties | Transaction, invoice and account data | Contract and legal obligation |
| Send essential verification, security and service messages | Email, account and security state | Contract and legitimate interests; legal obligation where applicable |
We do not sell your personal information. We do not use your uploaded material for advertising profiles. A new purpose will be assessed and explained before use where required.
How ideas, scripts, audio and video are handled
Your material remains yours. Brilyze processes it only to run the checks, transcription, analysis, generation, comparison, storage or export that you request, and to keep the service safe.
- Uploads undergo format, size and safety checks before analysis.
- Rejected media is not sent to the analysis model, is deleted, and does not consume a credit.
- For a rejected file, Brilyze may retain a minimal event containing the account, date and blocked category, but not the rejected media.
- A video is not stored after its analysis unless you voluntarily tick the separate authorisation box presented for that analysis.
- If you tick the box, Brilyze may retain that specific video for no more than 30 days solely to improve the Brilyze model. The permission is optional and refusing it does not prevent the requested analysis.
- You may withdraw that permission and delete retained videos through the profile at any time. Withdrawal does not affect processing that was lawful before withdrawal.
AI and media-processing providers may receive the minimum input needed for the requested operation. Brilyze does not authorise those providers to use your content for their own advertising.
How long information is kept
- Video without optional authorisation: removed after the requested analysis is completed.
- Video with optional authorisation: kept solely to improve the Brilyze model for no more than 30 days, unless you delete it or withdraw permission sooner.
- Rejected media: deleted immediately; only the minimal security event may remain.
- Saved projects and results: kept while your account is active or until you delete them, subject to backup expiry and legal requirements.
- Account and support records: kept while needed to provide the service, resolve disputes, enforce security and meet legal obligations.
- Transaction records: when billing begins, retained for the period required by tax, accounting and fraud-prevention law.
Where no fixed period is stated, we use the shortest period reasonably necessary for the purpose, taking account of account status, sensitivity, security risk, legal duties and whether information can be deleted or anonymised.
Your choices and data rights
Depending on applicable law and the processing involved, you may ask for access, correction, deletion, restriction, portability or a copy of your information, and may object to processing based on legitimate interests. You may withdraw consent at any time.
Profile controls let you manage preferences, retained videos, sessions and account deletion. You can also email support. We may need to verify your identity and may retain limited information where law or a compelling security requirement permits it.
Your right to object: you may object to processing based on legitimate interests by explaining your situation. You have an absolute right to object to direct marketing. Brilyze does not currently send optional marketing without the required choice.
International processing and safeguards
Some infrastructure or AI providers may process information outside your country, including in the United States. Where UK or European transfer rules apply, Brilyze will use a recognised transfer mechanism, such as an adequacy regulation or approved contractual safeguards, and assess supplementary security measures where required. You may ask support for further information about relevant safeguards.
How information is protected
Brilyze uses layered organisational and technical safeguards designed to protect accounts, isolate customer work, validate uploads, restrict administrative access and preserve service availability. Operational configurations, internal identifiers and defensive thresholds are not published because doing so could weaken those protections.
No internet service can guarantee absolute security. Please use a unique password, protect verification codes and contact us immediately if you suspect unauthorised access.
Children
Brilyze is not intended for anyone under 18 and we do not knowingly create accounts for children. If you believe a child has provided personal information, contact support so it can be investigated and removed where appropriate.
Questions, complaints and changes
Contact [email protected] with a privacy question or request. We aim to respond within the deadline required by applicable law.
If UK data-protection law applies, you may complain to the Information Commissioner’s Office. We would appreciate the opportunity to address the concern first, but you do not have to contact us before using your regulatory rights.
We review this notice as Brilyze, its providers and the law change. Material changes will be brought to your attention before they take effect where required. The effective date and version identify the current notice.