Privacy Policy

This Privacy Policy describes how Brightoar LLC, a Wyoming limited liability company ("Brightoar," "we," "us," or "our"), handles personal information in connection with this website (the "Site"). Brightoar LLC is the controller of personal information collected through the Site.

This policy applies to the Site only. It does not describe how we handle information under a separate agreement or proposal for our services; those arrangements are governed by the terms of that agreement. Use of the Site is also governed by our Terms of Use.

1. Who we are and how to contact us

Controller: Brightoar LLC, a Wyoming limited liability company.

Contact for privacy questions and requests: hello@brightoar.com.

2. Information we collect

The Site is designed to collect as little information as possible.

Contact form. If you send us a message through the contact form, we receive the information you choose to submit (see section 3).
Email. If you write to us at hello@brightoar.com, we receive your email address and the content of your message.
Technical logs. Our hosting provider, Cloudflare, may automatically record technical information when you visit the Site, such as your IP address, browser and device type (user agent), the pages requested, and the date and time of the request. These logs are used for security, reliability, and troubleshooting.
Spam protection. The contact page uses Cloudflare Turnstile, a security check that helps us block spam and automated abuse of the form. To run the check, Cloudflare processes technical data such as your IP address and signals from your browser and device. Turnstile does not use advertising cookies. We do not receive this data; we only receive the result of the check.
Cookies and analytics. The Site does not set its own cookies and does not use analytics or advertising tools (see section 10).
Third-party resources. Apart from the Cloudflare Turnstile check on the contact page, the Site does not load third-party resources. Fonts are self-hosted.

3. Information you send through the contact form

When you submit the contact form, we collect the information you choose to provide:

Name
Work email address
Company (optional)
Company size (optional)
Service of interest (optional)
Your message
Your consent to our handling of this information for the purpose of responding to you

We also record which language version of the Site you used, so we can reply in that language. We use this information to answer your message and to prepare the call you ask for.

Your submission is processed by Cloudflare on our behalf and delivered as an email, through Cloudflare, to our business mailbox. The Site does not store submissions in a database.

Please do not include sensitive personal information (for example, government identifiers, financial account numbers, or health information) in your message.

4. How we use information

We use information for the following purposes:

Operating and securing the Site, including preventing spam and abuse and diagnosing technical problems (technical logs and the Cloudflare Turnstile check).
Responding to your inquiry, preparing the call you request, and discussing whether our services may be a fit (contact form data and emails).
Taking steps you request before entering into an agreement, such as preparing a proposal.
Legal and administrative purposes, such as complying with legal obligations, enforcing our rights, and keeping records.

We do not use information collected through the Site for automated decisions that produce legal or similarly significant effects about you.

5. Legal bases for visitors in the EU and EEA

If you visit the Site from the European Union or European Economic Area, the General Data Protection Regulation (GDPR) requires us to rely on a legal basis for processing. We aim to rely on the following:

Legitimate interests (GDPR Art. 6(1)(f)) for technical logs used to keep the Site secure and functioning, for the Cloudflare Turnstile check that protects the contact form from spam and abuse, and for responding to business inquiries sent by email, balanced against your rights and interests.
Consent (GDPR Art. 6(1)(a)) for contact form submissions, which you give by ticking the consent box and submitting the form. You may withdraw consent at any time by contacting us; withdrawal does not affect processing carried out before it.
Steps prior to entering into a contract (GDPR Art. 6(1)(b)) where you ask us to prepare a proposal or discuss services.
Legal obligation (GDPR Art. 6(1)(c)) where we must keep or disclose information under applicable law.

6. How long we keep information

Technical logs: kept for the period set by our hosting provider, Cloudflare [retention period — to be confirmed], which we expect to be short, and no longer than needed for security and troubleshooting.
Contact form submissions and emails: kept in our mailbox for as long as needed to respond to you and manage any resulting business relationship, and then for a limited period for record-keeping [specific retention period — to be confirmed]. If no business relationship follows, we aim to delete them once they are no longer needed for that purpose.
Spam protection data: the technical data used for the Turnstile check is processed by Cloudflare; we do not store it.
We may keep information longer where required by law or to establish, exercise, or defend legal claims.

We share information only as needed:

Service providers that help us run the Site and handle inquiries: Cloudflare (hosting, the Turnstile check, and delivery of form submissions by email) and the provider of our business mailbox. They may process information only on our behalf and for our purposes.
Professional advisers, such as lawyers and accountants, under confidentiality obligations.
Authorities or other parties where required by law or to protect rights, safety, and security.
A successor if Brightoar is involved in a merger, financing, or sale of assets.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use the Site for advertising purposes.

8. International transfers

The Site is hosted by Cloudflare, which operates a global network, and contact form submissions are delivered to our mailbox by email. If you visit from outside the United States, your information may be transferred to and processed in the United States and other countries, where data protection laws may differ from those in your country. Where required, we aim to use appropriate safeguards for transfers of personal information from the EU/EEA, such as standard contractual clauses. [Transfer mechanism — to be confirmed with legal review.]

9. Your rights

California residents (CCPA/CPRA)

If California privacy law applies to you, you may have the right to:

Know what personal information we collect, use, disclose, and share, and to request a copy.
Delete personal information we hold about you, subject to exceptions.
Correct inaccurate personal information.
Opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of.
Limit the use of sensitive personal information. We do not collect sensitive personal information through the Site.
Not be discriminated against for exercising your rights.

Visitors in the EU and EEA (GDPR)

You may have the right to:

Access your personal information.
Rectify inaccurate information.
Erase your information in certain circumstances.
Restrict processing in certain circumstances.
Data portability, meaning receiving your information in a structured, commonly used format.
Object to processing based on legitimate interests.
Withdraw consent at any time where we rely on consent.
Lodge a complaint with your local supervisory (data protection) authority.

How to make a request

Contact us at hello@brightoar.com. We may need to verify your identity before acting on a request, and an authorized agent may submit a request on your behalf where the law allows. We aim to respond within the time required by applicable law. If you have not contacted us through the form or by email, we may have little or nothing to provide beyond technical logs held by our hosting provider.

10. Cookies and similar technologies

The Site does not set its own cookies and does not use analytics, advertising, or third-party tracking technologies. On the contact page, Cloudflare Turnstile runs a security check in your browser; it may use technologies strictly needed for that check and does not use advertising cookies. If this changes, we will update this policy before the change takes effect and, where required, ask for your consent.

11. Children's privacy

The Site is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at hello@brightoar.com and we will take steps to delete it.

12. Security

We design our Site and processes with reasonable administrative, technical, and organizational safeguards in mind, such as serving the Site over an encrypted connection and limiting the information we collect. No method of transmission or storage is completely secure, and we cannot promise absolute security.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "updated" date above. If we make material changes, we will take reasonable steps to notify you, for example by a notice on the Site.

14. Contact

Brightoar LLC, a Wyoming limited liability company
Email: hello@brightoar.com