This policy explains how BRETT INTELLIGENCE LIMITED (brett, we, us or our) uses personal data in connection with our website and AI-powered review and organisational intelligence platform.
1. Who we are
BRETT INTELLIGENCE LIMITED is registered in England and Wales under company number 17381109. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.
For personal data we use for our own business purposes, brett is the controller. When we process personal data in content supplied by a customer, we normally act as that customer's processor and our Data Processing Agreement applies.
Privacy enquiries may be sent to privacy@usebrett.com.
2. Information we collect
We may collect:
- account and business contact information, such as names, work email addresses, job titles and login details;
- subscription, billing and transaction information;
- documents, prompts, policies, comments and other content submitted to the Platform (Customer Content);
- outputs, reports, review decisions and audit information generated through use of the Platform;
- technical and usage information, such as IP address, device and browser information, login activity, pages or features used and diagnostic data;
- communications, support requests and feedback; and
- information received through integrations selected by a customer or from public business sources.
Customers decide what Customer Content to submit and are responsible for ensuring that they may lawfully provide it to us.
If you do not provide information needed to create an account or supply the Services, we may be unable to provide the relevant service.
3. How we use information
We use personal data to:
- provide, secure, maintain and improve our website, Platform and support;
- create and administer accounts and subscriptions;
- process Customer Content and generate AI-assisted outputs at a customer's direction;
- communicate with customers, users and prospective customers;
- monitor performance, investigate problems and prevent misuse;
- comply with law and protect our rights; and
- send business marketing where permitted by law.
Our lawful bases are performance of a contract, our legitimate interests in operating and improving a business service, compliance with legal obligations and, where required, consent. Where brett acts as a processor, the customer determines the applicable lawful basis.
4. AI processing
The Platform analyses Customer Content and related instructions to produce reviews, suggestions, classifications, summaries and reports. These outputs may be incomplete or inaccurate and are intended to support human decision-making.
brett is not a law firm, does not provide legal or regulated financial advice, and does not guarantee compliance. Customers remain responsible for reviewing outputs, approving communications and complying with applicable law and regulation.
We do not use Customer Content to train or improve models for other customers or for general model development unless the customer expressly agrees otherwise in writing. We may use AI and cloud service providers to process Customer Content solely to provide and secure the service.
We do not use the Platform to make decisions about individuals that produce legal or similarly significant effects on our own behalf.
5. Sharing information
We may share personal data with:
- cloud hosting, AI, authentication, analytics, communications, payment and support providers;
- professional advisers and authorities where required by law;
- a buyer, investor or successor in connection with a corporate transaction; and
- other parties where a customer or user asks us to do so.
Service providers may use personal data only as permitted by their agreements with us. A current list of subprocessors used for Customer Content is available to customers on request.
6. International transfers
Some providers may process personal data outside the United Kingdom. Where required, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful safeguard. Contact us for further information about relevant safeguards.
7. Retention and security
We keep personal data only for as long as reasonably necessary for the purposes described above, including to provide the service, meet legal or accounting requirements, resolve disputes and enforce agreements. Retention depends on the nature of the data, the customer relationship and applicable legal requirements.
We use appropriate technical and organisational measures designed to protect personal data, including access controls, encryption, logging, monitoring and backup arrangements. No service can guarantee absolute security.
8. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your personal data, object to processing, receive portable data and withdraw consent. You may also object to direct marketing at any time.
To exercise a right, contact privacy@usebrett.com. We may need to verify your identity. If brett processes the relevant data for a customer, we may refer the request to that customer.
You may complain to the Information Commissioner's Office at ico.org.uk, although we encourage you to contact us first.
9. Website analytics and marketing
Our website uses cookies and similar technologies, including Google Analytics, to understand how the website is used. You can control cookies through your browser settings. You can unsubscribe from marketing emails using the link in the email or by contacting us. We may still send service-related communications.
10. Changes and contact
We may update this policy from time to time. The current version will be published on our website with its updated date.
For privacy enquiries, contact privacy@usebrett.com. For general enquiries or support, contact hello@usebrett.com.