Privacy Notice

This Privacy Notice explains how The Brief Limited ("we", "us", or "our") collects, uses, and protects personal data when you use OnlyListen.

1. Who we are

The Brief Limited is the data controller for the personal data processed in connection with OnlyListen. If you have questions about this notice, contact us at support@gulfbrief.ae.

2. Data we collect

We collect and process the following categories of personal data:

• Email address. Collected only when you subscribe to Plus so we can restore your access across devices via a magic link.
• Usage and device data. When you visit the app or fetch a webpage, we may process your IP address, browser type, device type, and the pages you visit. This is used for security, fraud prevention, and service operation.
• Article and text content. When you paste a link, the page text is extracted on our server and returned to your browser. We do not store or log the extracted content or the original page.
• Support messages. If you contact us, we keep the information you provide so we can respond to your request.
• Payment data. We do not collect or store your payment card details. All payment information is collected and processed by Paddle, our Merchant of Record.

3. Purposes and legal basis

We process personal data for the following purposes:

• Provide the service. To read articles aloud, manage your Plus subscription, and keep your account accessible across devices. This is based on the performance of a contract or our legitimate interest in providing the app.
• Security and fraud prevention. To detect and prevent abuse, unauthorized access, and other harmful activity. This is based on our legitimate interests.
• Customer support. To respond to your questions and resolve issues. This is based on our legitimate interests or the performance of a contract.
• Marketing. We do not send promotional emails unless you have explicitly consented. You can withdraw consent at any time.

4. Who we share data with

We share personal data only with the following categories of recipients:

• Paddle (Merchant of Record). We share your email address and transaction details with Paddle so they can manage payments, billing, subscriptions, tax, invoicing, and refunds on our behalf. Paddle acts as an independent controller for the payment data it collects. For more information, see Paddle's Privacy Notice.
• ElevenLabs, Inc. If you choose an AI Plus voice, the text being read is sent to ElevenLabs for speech synthesis. ElevenLabs processes this text as a data processor and does not retain it.
• Hosting and service providers. We use cloud hosting and analytics providers to operate and improve the app. These providers process data only on our instructions and under appropriate security safeguards.
• Professional advisers and authorities. We may disclose data if required by law, regulation, or legal process, or to protect our rights and safety.

5. Data retention

We keep your personal data only for as long as necessary for the purposes described in this notice. Your email address and subscription records are kept for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce our terms, and comply with legal obligations. Support messages are kept for 12 months unless a longer retention period is required by law. Once no longer needed, we delete or anonymize the data.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict the processing of your personal data, or to receive a copy of it in a portable format. You may also object to processing based on legitimate interests and withdraw consent where processing is based on consent. To exercise these rights, contact us at support@gulfbrief.ae. We will respond within one month.

7. International transfers

We and some of our service providers are based outside the United Kingdom and the European Economic Area. When we transfer personal data outside these regions, we use appropriate safeguards, such as standard contractual clauses approved by the European Commission, to protect your data.

8. Security

We use appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls, and regular review of our practices. However, no online service can be completely secure, and we cannot guarantee absolute security.

9. Cookies and similar technologies

OnlyListen uses essential cookies to keep you signed in when you subscribe to Plus and to maintain basic app functionality. We do not use analytics or marketing cookies unless you explicitly consent to them. You can manage cookie preferences through your browser settings.

10. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be posted at this page. Continuing to use the service after changes means you accept the updated notice.

11. Contact

Questions about this Privacy Notice? Contact us at support@gulfbrief.ae.