Brevio helps organisations create and deliver short learning courses through workplace messaging platforms and the web. This policy explains how we handle personal data when you use Brevio or visit our website.
1. Information we collect
Depending on how you use Brevio, we may process:
- Account and organisation information: your name, email address, organisation, role, and identifiers associated with your account.
- Learning information: courses assigned to you, lesson progress, quiz answers, results, completion dates, and related interactions.
- Content provided to Brevio: documents and other materials uploaded by your organisation to create courses. These materials may contain personal data.
- Messaging and integration information: account identifiers and information needed to deliver lessons and receive responses through the platforms your organisation connects.
- Technical information: such as IP address, browser or device information, access times, and logs used to operate and secure the service.
- Communications: information you provide when contacting us for support or making an enquiry.
We may receive information directly from you, from your organisation, or from a connected service such as Microsoft Teams or Slack.
2. How we use information
We use personal data to:
- Create and manage accounts and authenticate users.
- Deliver lessons, quizzes, reminders, and other service messages.
- Record learning progress and provide reports to authorised administrators.
- Create learning content from materials uploaded by your organisation.
- Provide support, maintain security, and troubleshoot problems.
- Meet legal obligations and administer our business.
Where we act as a controller, our legal basis depends on the purpose. It may be the performance of a contract, compliance with a legal obligation, or our legitimate interests in operating, securing, and supporting the service. Where required, we rely on consent. You may withdraw consent at any time without affecting earlier lawful processing.
Where we process data on behalf of your organisation, we do so under our agreement with that organisation and its instructions. Your organisation determines its own legal basis for using Brevio.
3. Who can access information
Information may be accessed by:
- Brevio: authorised members of our team, as needed to operate, support, and secure the service.
- Your organisation: authorised administrators may access information about assigned courses, participation, progress, and results.
- Microsoft: when you sign in with a Microsoft account or use Brevio through Microsoft Teams, Microsoft processes information needed to authenticate your account and provide the relevant Microsoft services. Microsoft’s own privacy terms also apply to its services.
- Our hosting providers: our hosting partners host and operate infrastructure used by Brevio.
- Connected messaging platforms: such as Slack, Mattermost or Microsoft Teams your organisation chooses to connect. These platforms process the information needed to deliver lessons and receive your responses.
- AI service providers: Brevio may use AI to help create learning content from uploaded materials. OpenAI Inc. may process the relevant materials to provide this functionality.
We may also disclose information when required by law or to protect legal rights.
4. Where information is stored and processed
We aim to store and process personal data within the European Union wherever possible. Some services or support activities may involve processing or access outside the EU or European Economic Area, depending on the providers and integrations used.
Where a transfer outside the EEA is subject to the GDPR, we will use an applicable legal transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. You can contact us for more information about the safeguards that apply.
5. Your rights
Depending on applicable law, you may have the right to access, correct, delete, or obtain a copy of your personal data; restrict or object to certain processing; or withdraw consent where processing is based on consent.
If you use Brevio through your organisation, please contact your organisation first about your learning data. You can also contact us at info@brevio.chat , and we will assist or direct your request to the appropriate organisation.
You also have the right to complain to a data protection supervisory authority, including one in the EU country where you live or work.
6. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, and disclosure. No system can guarantee absolute security.
7. Cookies and similar technologies
Brevio may use cookies or similar technologies needed for functions such as authentication and keeping you signed in.
8. Changes to this policy
We may update this policy when our services or data practices change. We will publish the updated version here and, where required, provide additional notice.