BriefSync Privacy Policy

Effective date: November 1st, 2026 Last updated: November 6th, 2026

This Privacy Policy explains how Okzou Inc. ("Okzou", "we", "us" or "our"), the operator of BriefSync, collects, uses, discloses and protects personal information. It applies to the BriefSync application (app.briefsync.ca) and to the website briefsync.ca (together, the "Service").

We comply with Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and other privacy laws that apply to us.

1. Who is responsible

Okzou Inc. is responsible for the personal information described in this policy. Our person in charge of the protection of personal information (the "Privacy Officer") can be reached at:

Privacy Officer, Okzou Inc.

Joël Proulx Deschamps

435 Rue Closse, L’île-bizard, H9C1Y7, QC, Canada

Email: info@okzou.ca

2. Our role for Customer Content

BriefSync is a business-to-business service. When our customers, and the users they invite, put content into BriefSync, such as email templates, briefs and data from their connected email platforms, we process that content on the customer's behalf and according to its instructions. That customer is responsible for its own privacy obligations. If you are an individual whose information appears in a customer's content, please contact that customer first. We will help them respond.

3. Information we collect

Information you give us

  • Account information: first and last name, email address, password (stored by our authentication provider, never in plain text), and the name of your team or workspace.

  • Team information: the users you invite, their roles and their membership status.

  • Customer Content: templates, emails, content blocks, variables, images and related settings that you create or upload.

  • Integration credentials: credentials or tokens you provide to connect third-party platforms such as Salesforce Marketing Cloud or Mailchimp. These are stored encrypted.

  • Support and sales communications: messages you send us through support forms, email or contact requests.

Information collected automatically

  • Usage and audit logs: actions taken in your workspace (for example, creating or editing a template), with the user who performed them and when.

  • Technical data: IP address, browser type, device information, and server logs needed to operate and secure the Service.

Billing information

  • Self-Serve Plan payments are processed by Paddle, our Merchant of Record. Paddle collects your payment details and billing address under its own privacy notice. We receive only limited information from Paddle, such as customer and subscription identifiers, plan, billing interval, subscription status and the billing currency. We never receive your full payment card number.

  • For Custom Plans billed directly by Okzou, we collect the billing contact and invoicing details needed to invoice you.

4. Cookies and similar technologies

We use only the cookies and browser storage needed to run the Service:

  • Authentication cookies to keep you signed in securely.

  • Local storage to remember preferences such as your language and display currency.

  • Paddle.js, which loads on pages that show prices or checkout, may set cookies needed to display localized prices and process payments.

We do not use advertising or third-party analytics cookies in the BriefSync application itself. However, on our public-facing website (briefsync.ca), we use Google Analytics and Squarespace analytics to understand site traffic, visitor behavior, and overall performance. These performance cookies collect data such as your IP address, browser type, device information, and details about how you navigate the site (such as clicks, internal links, and pages visited). We share this information with Squarespace, our website analytics provider, strictly to analyze site activity and improve our website experience. These analytics cookies are only placed on your device if you acknowledge our cookie banner.

5. How we use personal information

We use personal information to:

  1. create and manage accounts and workspaces, and authenticate users;

  2. provide the Service, including syncing content with the third-party platforms you connect;

  3. process subscriptions, upgrades, cancellations and invoices;

  4. send service emails, such as verification, password reset, invitations, billing and important service notices;

  5. respond to support and sales requests;

  6. secure the Service, prevent fraud and abuse, and keep audit records;

  7. maintain and improve the Service; and

  8. comply with our legal obligations.

We do not sell personal information, and we do not use Customer Content to train artificial intelligence models.

6. Consent and legal bases

We collect and use personal information with your consent, which you give by creating an account or using the Service, or where otherwise permitted by law, for example to perform our contract with you, to meet legal obligations or for our legitimate interests in securing and improving the Service. You may withdraw your consent at any time, subject to legal and contractual restrictions. Withdrawing consent may mean we can no longer provide the Service.

7. Service providers and disclosures

We share personal information only with service providers that help us operate the Service. They are bound by contracts to protect it and to use it only to provide their services to us:

  • Vercel Inc.: Application hosting and file storage

  • Neon: Database hosting

  • REDIS.io: Caching and rate limiting

  • Stack Auth: User authentication

  • Twilio SendGrid: Sending service emails

  • Paddle.com: Payments, taxes and invoicing for Self-Serve Plans (as Merchant of Record)

  • ClickUp: Managing support requests

We also exchange data with third-party platforms you choose to connect, such as Salesforce Marketing Cloud and Mailchimp, when you instruct the Service to do so.

We may also disclose personal information to comply with the law or a valid legal request, to protect the rights, property or safety of Okzou, our customers or others, or as part of a merger, acquisition or sale of assets, with appropriate protections in place.

8. Where information is stored

Our service providers may store and process personal information outside Quebec and Canada, including in United States. Before transferring personal information outside Quebec, we assess whether it will receive adequate protection, as Quebec law requires. Information stored in another jurisdiction may be accessible to that jurisdiction's courts and authorities.

9. Retention

We keep personal information only as long as needed for the purposes described in this policy:

  • Account and Customer Content: for as long as your workspace is active. After your subscription ends or your workspace is closed, we delete or anonymize it within a reasonable period (generally 30 days after any export window), except where we must keep it longer by law.

  • Audit logs: for the retention period configured for your workspace (365 days by default).

  • Billing records: for as long as tax and accounting laws require.

  • Backups: deleted data may remain in backups for a limited period until they are overwritten.

10. Security

We use reasonable administrative, technical and physical safeguards suited to the sensitivity of the information. These include encryption in transit (HTTPS), encryption of integration credentials, access controls and role-based permissions, and audit logging. No method of transmission or storage is completely secure, but if a confidentiality incident creates a risk of serious injury, we will notify affected individuals and the Commission d'accès à l'information du Québec as required by law.

11. Your rights

Subject to applicable law, you have the right to:

  • access the personal information we hold about you;

  • correct inaccurate or incomplete information;

  • ask us to delete your information or stop disseminating it;

  • withdraw your consent;

  • receive computerized personal information you provided to us in a structured, commonly used technological format; and

  • be informed of, and submit observations on, any decision about you based exclusively on automated processing. BriefSync does not make such decisions.

To exercise these rights, email info@okzou.ca. We will respond within 30 days and may need to verify your identity. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

12. Minors

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under 18.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date, and notify you of material changes by email or in the Service.

14. Contact us

Questions or requests about privacy:

Privacy Officer, Okzou Inc.

Joël Proulx Deschamps

435 Rue Closse, L’île-bizard, H9C1Y7, QC, Canada

Email: info@okzou.ca