Privacy

Last updated 9 August 2026. Brevva is a private preview run by one person.

This describes what Brevva actually does today. Where something is not built, it says so rather than describing an intention.

What is collected

Your account. Email address, display name, timezone. If you sign in with Microsoft or Google, that provider confirms your identity to Brevva; Brevva stores the link, not your password.
What you tell it you want. Topics, people and sources you follow, the significance dials you set, and anything you type into the natural-language box on your profile.
What it infers. Per-item relevance scores for you, computed daily. These are the largest thing Brevva stores about you by row count.
What it sent you. Every briefing, the items in it, and which links you clicked.
What you send back. Ratings on briefing items, and articles you email to like@brevva.ai or forward to newsletters@brevva.ai, including the email itself.
Delivery and consent records. Each send attempt with its outcome, whether the address has unsubscribed or bounced, and when consent was given, by what mechanism, and the exact wording shown at the time.

Why

To choose what to put in your briefing and to write a sentence explaining why each item might matter to you. The consent and delivery records exist because Canadian anti-spam law requires being able to demonstrate that email was consented to, and because an address that has bounced or complained must never be mailed again.

Who it is shared with

Anthropic. Article text and a summary of your interests are sent to Anthropic's API to analyse content and write your briefing. This is the core of how Brevva works and cannot be turned off while using it. Your email address is not sent.
Resend. Your email address and the briefing itself, in order to deliver it.
Microsoft or Google. Only if you sign in with them, and only to confirm it is you.
Fastmail. Only if you email like@brevva.ai or newsletters@brevva.ai — those mailboxes are hosted there.
OpenRouter. Article text only, during offline quality-measurement research. No account or personal data.

Nothing is sold. Nothing is used for advertising. Brevva does not train models on your data.

Where it lives

A single DigitalOcean virtual server in their tor1 region — Toronto, Canada — with one PostgreSQL database on the same machine. Anthropic, Resend and OpenRouter process data on their own infrastructure, which may be outside Canada.

How long it is kept

Account data, interests, briefings and consent records are kept until you ask for them to be deleted. Article content ages out of the working pool after 7 days. There is no automatic expiry of your account data.

Stated plainly: there is no scheduled deletion of old briefings, scores or click history. If you want that, ask.

Getting your data, and deleting it

Both are done by asking. Reply to any Brevva email — it reaches the person who runs it.

There is no self-serve export or delete button. Brevva is a preview run by one person; these are handled by hand, normally within a few days. Saying so is more useful than describing a control that does not exist.

Deletion is complete and verified: the tool re-checks every table afterwards and reports failure rather than success if anything remains.

What survives deletion, and why

Two records about your email address are kept even after everything else is removed:

A suppression record, if you unsubscribed, bounced or reported Brevva as spam. Without it, deleting and recreating an address would make it mailable again — someone who asked never to be contacted would start receiving mail.
Your consent history — the address, when consent was given or withdrawn, by what mechanism, and the wording shown. Erasing it would destroy the record that past emails were lawfully sent, without un-sending them. Since the address is kept regardless for the suppression record above, deleting the consent history achieves no further erasure while removing the only evidence.

Both are minimal: an address, a timestamp, and a reason. No content, no reading history, no interests. Billing records of AI usage are kept but have your identifier removed, because deleting them would misstate what the service cost to run.

If you want the suppression record removed too, ask — but understand it is the thing stopping mail reaching you.

Stopping email

Every briefing has an unsubscribe link. One click, no sign-in. It stops the email and also stops Brevva preparing briefings for you. Nothing is deleted, and you can resubscribe from the same page.

Cookies

One session cookie when you sign in. No analytics, no advertising, no third-party trackers.

Contact

Reply to any Brevva email. It reaches the one person who runs it.

This is a plain description of a small system, not legal advice, and Brevva is not a company. If something here matters to you and is unclear, ask and it will be answered directly.