Legal

Privacy Policy

Last updated: May 2026

1. Who we are

Everyone Loves Donuts Ltd T/A The Unfounded (company number NI740242) is the data controller for personal data processed through Briggs & Co. Our registered office is at 1st Floor, 533 Saintfield Road, Carryduff, Belfast, Northern Ireland, BT8 8ES.

Contact us about privacy matters at support@briggsandco.ai.

2. What data we collect

We collect the following categories of personal data:

  • Account data: name, email address, authentication credentials (managed by Clerk)
  • Profile data: business name, business stage, location, goals, and other information you provide during onboarding and in account settings
  • Conversation data: the content of your conversations with Oscar, Emmett, and Harry
  • Usage data: message counts, feature usage, and session information
  • Payment data: subscription status and payment history (payment card details are processed by Stripe and never stored by us)
  • Referral data: your referral code and any referral relationships

3. How we use your data

We use your personal data to:

  • Provide and improve the Service
  • Personalise your advisory conversations
  • Process payments and manage subscriptions
  • Send transactional emails (welcome, receipts, trial reminders)
  • Respond to support requests
  • Comply with legal obligations

4. Legal basis for processing

We process your data on the following legal bases:

  • Contract: processing necessary to provide the Service you have signed up for
  • Legitimate interests: improving the Service, preventing fraud, and ensuring security
  • Legal obligation: where required by law

5. Data processors

To deliver Briggs & Co. we work with carefully selected third-party service providers. Each provider processes only the data necessary to perform their specific function and is bound by data processing agreements.

Our current processors are:

  • Clerk — user authentication and identity management
  • Supabase — secure database storage
  • Anthropic — AI response generation
  • Stripe — payment processing
  • Upstash — rate limiting and performance
  • Vercel — platform hosting and delivery

We do not sell your data. We do not use your data for advertising. Full details of each processor's data practices are available in their respective privacy policies. For any queries contact support@briggsandco.ai.

6. Conversation data and AI processing

Your conversations are processed by Anthropic's Claude AI model to generate responses. Conversation content is stored in our database to provide conversation history and continuity. We do not use your conversation content to train AI models.

7. Data retention

We retain your account and conversation data for as long as your account is active. If you delete your account your data will be deleted within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise any of these rights contact us at support@briggsandco.ai. We will respond within 30 days.

9. Cookies

We use essential cookies to keep you signed in and maintain your session. We also use Google Analytics to understand how visitors use our website — these cookies collect anonymised usage data (pages visited, time spent, general location). No personally identifiable information is collected through analytics cookies. We do not use advertising cookies or cookies that track you across other websites. For full details see our Cookie Policy at briggsandco.ai/cookie-policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data. These include encrypted data transmission, secure authentication via Clerk, and row-level security on our database.

11. International transfers

Some of our service providers are based outside the UK. Where data is transferred internationally we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email. The current version is always available at briggsandco.ai/privacy.

13. Contact and complaints

For privacy queries contact support@briggsandco.ai.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

Registered company

Everyone Loves Donuts Ltd T/A The Unfounded

Company number: NI740242
Registered office: 1st Floor, 533 Saintfield Road, Carryduff, Belfast, Northern Ireland, BT8 8ES