Privacy

What Debrief stores when you sign in with your work Google account and log a scored session, and who can see it.

What we store

• Your Google account id, email address, and display name, so your scores are yours and only yours.
• For each session you choose to log: the date, meeting type, your role, five dimension scores and the total, a confidence flag, a one-line headline, a summary of your own behavior (300 characters at most), behavior and situation codes from a fixed list, three strength labels, three change labels, and whether last session’s changes landed.
• A short coach’s note about your patterns, regenerated from your own sessions, and your delivery preferences.

What we never store

Transcripts, meeting titles, attendee names, quotes, or the text of the review. The server rejects any submission that contains the name of anyone on your organization’s member list, and any field it doesn’t recognize.

Who can see it

Only you can read your rows. This is enforced in the database, not by policy. Your organization can see aggregate statistics per meeting type, and only for numbers with at least five distinct people behind them. No per-person data exists in those aggregates. PVK Strategies operates the service and does not read individual records.

Deletion

Ask Debrief to “delete my scores” and everything about you is removed immediately. You can also ask what Debrief knows about you at any time, and edit or delete the coach’s note.

How long we keep it

Your scores and labels stay until you delete them or your organization stops using Debrief. “Delete my scores” removes them from the live database immediately, and backup copies expire within 30 days. If your organization ends its agreement, we delete all of its records within 30 days, after an export if it asks for one. Sign-in tokens expire after 30 days. Server logs record which feature was used, when, and by which account ID, never the content of a review, and are kept for no more than 30 days.

Who else handles your data

Debrief uses three service providers:

• Railway hosts the server and database.
• Google handles sign-in and shares only your name and email address with Debrief.
• Anthropic runs Claude, which writes your review. It receives the transcript for that purpose only, does not use it to train models, and deletes it within 30 days. Content that Anthropic’s automated safety systems flag may be kept for up to two years.

Debrief never stores transcripts. The transcript is read by Claude to write your review and is not saved by Debrief. Debrief does not sell your data, use it for advertising, or use it to train AI models.

Sign-in

Sign-in uses Google with the basic identity scopes only (name and email). Debrief never reads your mail, calendar, or files. Access tokens are stored hashed and expire after 30 days.

Contact

Questions about your data: patrickv.nyc@gmail.com.