Legal

Privacy Policy

Last updated: April 27, 2026

1. Information We Collect

We collect information you provide directly:

• Account information (email, password, business name)
• Business details (phone, services, service area)
• Contact form submissions
• Newsletter signups (email address)
• Payment information (processed by Stripe — we never store card numbers)

We automatically collect:

• Usage data (pages visited, features used)
• Device and browser information
• IP address and approximate location

2. How We Use Your Information

• Provide and improve our services
• Process payments and manage subscriptions
• Send service updates and support communications
• Send marketing emails (only if you opt in — unsubscribe anytime)
• Generate analytics and performance reports for your account

3. Data Sharing

We do not sell your data. We share information only with:

• Stripe — for payment processing
• Supabase — for data hosting and authentication
• Vercel — for website hosting

4. Data Security

We use industry-standard encryption (TLS/SSL), secure authentication, and row-level security policies. Your data is isolated — no client can access another client's information.

5. Your Rights

You can:

• Access your data through the portal at any time
• Update or correct your information
• Request deletion of your account and data
• Export your data
• Opt out of marketing communications

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

7. Data Retention

We retain your data for the duration of your account. After cancellation, data is deleted within 90 days unless you request immediate deletion.

8. Contact

Privacy questions? Contact us at brightdesk.ai/contact.