Trust / Security
Security
How Brevoir protects workspace privacy, controls access and handles your content.
Private content belongs in your workspace.
Workspace membership and connected tools have defined permissions.
Report a concern directly to our team.
On this page
The information we handle
Brevoir holds the information needed to provide your account, your workspace and the research you request.
- Account details: your name, email address and sign-in method.
- Workspace content: theses, lists, notes, deals, uploaded documents, decisions, memos and conversations.
- Business research about companies and funds.
- Billing records: your plan and invoices. Our payment processor holds card details; we never receive your full card number.
Our privacy policy describes collection, processing and retention in full.
Your workspace boundary
Your documents, notes, thesis, deals, decisions and conversations are private to your workspace. They are not shown to other customers and do not become part of research available to other workspaces.
Your private work
Uploaded materials, your interpretation, your pipeline and research on a person stay within your workspace.
Public business research
Research about public company and fund information may also be available to other customers. It does not reveal your private interest or reasoning.
Uploaded documents and private links, including data-room links, remain private to your workspace. For each deal, you control whether a confidential company may be researched on the open web: Allow or Never.
One thing is counted across workspaces: how many investors are watching a company, a fund or a founder. Any figure shared with other investors is a range, never a list of names, and is available only once at least five investors are watching.
Models and your content
To complete your request, Brevoir sends the content needed for that work to the providers that process it. Their terms govern processing and retention.
Paid workspaces can connect a model provider using their own key. Work using that key follows your agreement with that provider. Keys you add are stored encrypted.
Account and workspace access
Sign in with email and password, Google or Microsoft. Firms can use their Google or Microsoft work accounts.
- New accounts must confirm their email address before running research.
- Passwords are stored as hashes, never as the original password.
- The workspace owner manages membership and is the only person who can change the plan or seats.
Connected tools, controlled by you
MCP clients and API programs operate within the same permissions and limits as the app. They can read and propose work.
A connected client cannot spend research credits or start scheduled work until you set its monthly credit cap, which starts at zero, or confirm the work in the app.
Exporting and deleting
Export your data or delete your workspace in Settings. Deleting a workspace deletes its private content. The retention policy explains how long each kind of record is kept.
Report a security concern
Send security reports to support@brevoir.com. Include the location of the issue, what you observed and the steps needed to reproduce it.
Please allow reasonable time for a fix before publication. While testing, do not open, change or delete data that is not yours. We read and reply to every report; we do not pay rewards.
This contact is also published in security.txt.