Privacy Policy

Last Updated: August 21, 2025

Controller: Bright Information Technology LLC (“Bright,” “we,” “us”)

Contact: [email protected] | [email protected]

1. Scope

This Policy covers personal information we process when you visit our websites, use the Bright Portal, or interact with us. Where we process personal data on behalf of customers (e.g., MSPs and their End Clients), we act as a processor/service provider and our DPA governs.

2. Information We Collect

• Account & Profile: name, email, role, organization, authentication data.
• Usage & Device: logs, telemetry, IP address, browser/OS, event data.
• Customer Content: data users upload or generate in the Portal (managed by the customer/MSP).
• Billing: plan selection, invoice and payment metadata (handled by our payment processor).
• Support: communications, tickets, attachments.

3. How We Use Information

• Provide, operate, and secure the Portal (including fraud/abuse prevention).
• Customer support and service communications.
• Billing and account management.
• Comply with law and enforce Terms.
• We do not use Customer Content to train or improve models or unrelated services.

4. Sharing

• Service providers/subprocessors (categories: cloud hosting, email/SMS delivery, logging/monitoring, analytics, payment processing, support tooling) under confidentiality and data-protection terms.
• MSP Partners where your organization is managed by an MSP.
• Legal/Compliance as required by law or to protect rights.

5. International Transfers

Where applicable, we use lawful transfer mechanisms (e.g., SCCs) and implement appropriate safeguards.

6. Data Retention

We retain personal information as long as necessary for the purposes above. Customer Content is retained 30 days after termination/suspension for export, then deleted/anonymized (subject to legal holds).

7. Security

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the data.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing. Requests: [email protected]. If your data is managed by an MSP or employer, contact them first.

9. Children

The Portal is not for individuals under 18; we do not knowingly collect such data.

10. Changes

We will post updates with a new “Last Updated” date and, for material changes, provide reasonable advance notice.