ActBrief ("we", "us") provides a self-serve AI Act readiness scan at actbrief.com. This policy explains what data we collect when you use the scan, why, and for how long we keep it.

What we collect

The information you submit in the scan form: product URL, a description of your AI feature, industry, and your email address.
Your IP address, held in memory only, used to rate-limit form submissions (max 10/minute) and never written to disk.
If you opt into analytics: aggregate, cookieless page-view data via Plausible. We do not use tracking or advertising cookies.

Why we collect it

To generate and deliver your AI Act readiness report (contract performance — you requested this report).
To email you a copy of your report, if email delivery is enabled.
To notify our team internally when a new scan is submitted, so we can improve the product and follow up if you ask us to.
To prevent abuse of the scan form (legitimate interest).

How long we keep it

Report data (your submitted inputs and generated report) is stored for 30 days and then automatically deleted. We do not use your submissions to train any AI model.

Who we share it with

We use the following processors, only where enabled: Resend (transactional email delivery) and Plausible (privacy-first analytics). We do not sell personal data, and we do not share it with data brokers or advertisers.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, delete, or export the data we hold about you, and to object to our processing. Since reports auto-expire after 30 days, most requests resolve automatically — but you can email us at privacy@actbrief.com to request earlier deletion or ask any question about your data.

Cookies

ActBrief does not set cookies. If analytics is active, it runs without cookies or persistent identifiers (Plausible).