Privacy Policy

1. Core Commitment: Zero Data Retention

At LensBrief, the privacy of your reading is our absolute priority. We believe reading and thinking must remain free and private. No selected text, analyzed paragraphs, visited URLs, or reading history are ever logged or retained on our servers.

2. Processing of Reading Data

When you select a word or expression to get an instant contextual explanation:

• The selected term and its surrounding paragraph context are transmitted securely over TLS/HTTPS to our Cloudflare Worker edge infrastructure.
• Content is processed strictly ephemerally in volatile RAM to query our AI engine and generate the synthesis.
• As soon as the explanation is streamed back to your browser, all reading content is immediately cleared from memory.

3. Account & Authentication Data

To manage quotas and subscriptions (Free and Plus plans):

• Google OAuth Sign-in: If you sign in with Google, we only collect your unique Google subject ID (`sub`) and your email address. We never have access to your password.
• Session Tokens: Session tokens are stored exclusively as cryptographic SHA-256 hashes in our secure database.
• Anonymous Users: Guest users are identified solely through a locally generated anonymous installation ID (`install_id`).

4. Payments & Billing (Dodo Payments)

Payment transactions for LensBrief Plus subscriptions are fully handled and processed by our authorized Merchant of Record, Dodo Payments. LensBrief does not collect, process, or store credit card numbers, CVVs, or sensitive financial information.

5. Your Rights (GDPR & Global Standards)

In accordance with global data protection regulations (including GDPR and CCPA), you have the right to access, rectify, or request deletion of your account and personal data. You can request full account deletion at any time by contacting our team at: [email protected].