Privacy Policy

1. Introduction

BrightCart ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service ("Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and other registration information
• Profile Information: Business name, address, phone number, and other contact details
• Payment Information: Billing address, credit card information (processed through secure third-party payment processors), and transaction history
• Store and Product Information: Store details, product listings, descriptions, images, and pricing information
• Customer Service Communications: Information you provide when contacting our support team

2.2 Information Automatically Collected

When you use our Service, we automatically collect certain information, including:

• Usage Data: Information about how you interact with the Service, including pages visited, features used, and time spent on the Service
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our Service and store certain information

2.3 Information from Third Parties

We may receive information from third parties, including:

• Payment Processors: Transaction details and payment status from payment service providers (e.g., Stripe)
• Authentication Services: Information from third-party authentication providers if you choose to sign in using these services (e.g., Google)
• Analytics Providers: Aggregated usage and analytics data

3. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the Service: Create and manage your account, process transactions, and deliver the services you request
• Process Payments: Process subscription payments and transaction fees
• Communicate with You: Send you service-related communications, respond to your inquiries, and provide customer support
• Improve the Service: Analyze usage patterns, conduct research, and develop new features
• Marketing: Send you promotional communications about our Service (you can opt out at any time)
• Legal Compliance: Comply with legal obligations, enforce our terms of service, and protect our rights and the rights of our users
• Security: Detect, prevent, and address technical issues, fraud, and security threats

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processors for processing transactions
• Hosting and cloud storage providers
• Analytics and marketing service providers
• Customer support service providers

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4.5 Public Information

Information you choose to make public through your store (such as product listings, store descriptions, etc.) will be visible to visitors of your store and may be indexed by search engines.

5. Payment Information

We do not store your full credit card details on our servers. Payment information is processed securely through third-party payment processors (such as Stripe) that comply with industry security standards (PCI DSS). We only store payment method identifiers and billing information necessary to process recurring subscription payments.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6.1 Security Measures

• Encryption of data in transit using SSL/TLS
• Secure storage of sensitive information
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information at any time through your account settings.

7.2 Opt-Out of Marketing Communications

You can opt out of receiving promotional emails from us by following the unsubscribe instructions in those emails or by contacting us directly.

7.3 Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

7.4 Data Deletion

You may request deletion of your personal information by contacting us. We will delete your information in accordance with applicable law, though we may retain certain information as required by law or for legitimate business purposes.

7.5 Subscription Cancellation

You can cancel your subscription at any time through your account dashboard. Upon cancellation, your subscription will remain active until the end of your current billing period.

8. Data Retention

We retain your personal information for as long as necessary to provide you with the Service and fulfill the purposes described in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to the transfer of your information to facilities located outside your jurisdiction.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites or services you visit.

12. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete personal information we have collected from you
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

13. European Privacy Rights

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectify inaccurate personal data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making

To exercise these rights, please contact us using the information provided below.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will also notify you via email or a prominent notice on our Service if the changes are material.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: