Last updated November 6, 2026
Privacy
Briefcase is a small, invite-only tool run by CableCar Digital that turns a client brief into a discovery plan. This page says what Briefcase keeps about you, who else handles it, and how to have it removed. If anything here is unclear, write to bryan@cablecar.digital.
What Briefcase keeps
- Your account: your name, your email address, your role, and your password, which is stored only as a one-way hash.
- What you put in: the briefs you paste, your answers to the clarifying questions, the plans Briefcase writes, your edits, and engagement titles.
- Usage records: for each request to our agent, which engagement and step it was for, how many tokens it used, and when. These are used to keep costs in check.
- Invite requests: the name, email and note you send when asking for an invite.
- Sign-in sessions: the IP address and browser of each session, used to keep you signed in.
What Briefcase doesn’t do
Briefcase doesn’t sell your data, show ads, or use analytics or tracking cookies. It sets one cookie to keep you signed in, and your browser remembers whether you chose the light or dark theme.
Who can see it
- You see everything you put in. Nobody else’s account can.
- The people who run Briefcase can see the list of accounts, invite requests, and each account’s counts of engagements, plans and agent usage, to keep it running and paid for. They don’t read your briefs or plans unless you ask for help with one.
Who else handles it
- Anthropic provides the AI model behind our agent, which writes the questions and plans. Each request sends Anthropic the brief, your answers and, when you regenerate a section, the current plan. Under Anthropic’s API terms, this content isn’t used to train its models.
- Postmark sends Briefcase’s emails (invites, invite requests and password resets), so it receives your email address and the message.
- Render hosts the app and its database.
Your clients’ information
Briefs often describe someone else’s business. Paste only what you’re allowed to share, and leave out anything you wouldn’t send to a contractor, such as passwords or personal details about your client’s customers.
How long it’s kept
Your data is kept while you have an account. Deleting an engagement deletes its brief, answers and plan; its usage records stay, without the content. When an account is deleted, everything in it is deleted with it. Copies may remain in the host’s backups for a limited time.
Your choices
- Delete any engagement from your list at any time.
- To delete your account and everything in it, or to get a copy of your data, email bryan@cablecar.digital.
Changes
If this page changes, the date at the top changes with it. A change that affects how your data is used will be explained here before it takes effect.