This Privacy Policy explains how BRIGHT THINK LLC ("Company", "we", "us" or "our"), a Wyoming limited liability company, collects, uses, discloses and protects personal data in connection with the BrightThink AI website at brightthink.net and related services (the "Services"). We handle personal data in accordance with applicable U.S. federal and state privacy laws and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.
1. Who we are
BrightThink AI is a brand and product operated by BRIGHT THINK LLC. BRIGHT THINK LLC is responsible for (and is the controller of) the personal data described in this Policy. You can contact us at [email protected].
2. Personal data we collect
- Information you provide: name, company name, work email address, phone number, job title, and the contents of any message or inquiry you send us, including when you email us or apply to our BrightThink for Good nonprofit program (applications are sent by email).
- Account and billing information: if you sign up for a paid plan, we collect billing contact details and transaction records. Payment card details are processed by our payment service providers and are not stored on our systems.
- Usage and technical data: IP address, browser type and version, device identifiers, pages visited, referring URLs, language preference, and similar data collected automatically when you use the website.
- Content you submit to the Services: data, documents and knowledge-base material you upload to build or operate agents. We process this content only to provide the Services to you.
3. How we use personal data
- To provide, operate, maintain and improve the Services;
- To respond to inquiries, demo requests and support tickets;
- To create and administer accounts, process payments and issue invoices;
- To send service communications, and (where you have consented or where permitted by law) marketing communications, which you may opt out of at any time;
- To monitor security, prevent fraud and abuse, and enforce our Terms of Use;
- To comply with legal obligations, including anti-money-laundering, tax and record-keeping requirements.
4. Legal basis and consent
We collect personal data on a voluntary basis. Where applicable law requires consent for a particular use (for example, certain marketing communications), we will obtain your consent before doing so. If you are in the European Economic Area or the United Kingdom, we process personal data on the following legal bases: to perform a contract with you or take steps at your request before entering into one; for our legitimate interests in operating, securing and improving the Services; with your consent, which you may withdraw at any time; and to comply with legal obligations. Failure to provide certain personal data may mean we are unable to provide the Services to you.
5. Disclosure of personal data
We do not sell personal data. We may share personal data with:
- Service providers who host our infrastructure, process payments, provide analytics, or deliver email on our behalf, under contractual obligations of confidentiality and data protection;
- Cloud and AI infrastructure partners (including Amazon Web Services and large-language-model providers) to the extent necessary to operate the Services;
- Professional advisers such as auditors, lawyers and bankers, on a need-to-know basis;
- Regulators, courts and law-enforcement agencies where required by law or to protect our rights;
- A successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy.
6. International transfers
We are based in the United States. Our Services use infrastructure located in the United States and other jurisdictions, including Singapore and Japan, and the website is delivered through a global content delivery network. Where personal data is transferred across borders, we rely on appropriate safeguards required by applicable law, such as standard contractual clauses for transfers from the European Economic Area or the United Kingdom.
7. Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to provide the Services, and to comply with legal, accounting and regulatory requirements. Usage logs are typically retained for no longer than 12 months. Content you upload to the Services is deleted or anonymized within 30 days after your account is closed, unless a longer period is required by law.
8. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Cookies and similar technologies
The website does not currently use analytics or advertising cookies. We use your browser's local storage to remember your language preference. Our hosting and content delivery provider, Cloudflare, may set strictly necessary cookies for security and performance purposes. Because we do not sell or share personal information for cross-context behavioral advertising, there is nothing to opt out of; we treat Global Privacy Control signals consistently with that commitment. You can control cookies and local storage through your browser settings.
10. Your rights
Depending on where you live, you may have rights under applicable U.S. state privacy laws (such as the California Consumer Privacy Act, as amended by the CPRA) to know what personal information we collect and how we use it, to access it, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising. You may also opt out of marketing communications at any time.
If you are in the European Economic Area or the United Kingdom, you also have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at [email protected]. We will verify your identity before acting on a request, and you may designate an authorized agent to make a request on your behalf.
11. Children
The Services are intended for business users and are not directed at individuals under the age of 18, and in particular not at children under 13 within the meaning of the U.S. Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date above indicates when it was last revised. Material changes will be notified on the website or by email where appropriate.
13. Contact
BRIGHT THINK LLC
Wyoming, United States
Email: [email protected]