Privacy Policy | BrightROI

Who we are

BrightROI ("we", "us") is based in Hyderabad, Telangana, India, and works with service businesses in the United States and India. This policy covers www.brightroi.co.

For anything in this policy, email adith@brightroi.co.

What we collect

When you ask for a Growth Blueprint

The form asks for your first name, email address, business name, website, an optional Instagram or Facebook link, what you sell, and whether you are running ads. Alongside those we record the page you sent it from, the campaign tags in the link you arrived by (such as utm_source), and the website that referred you, if any.

When you book a call

Booking is handled by Calendly, embedded on our contact page and after the Growth Blueprint form. Calendly collects what you enter there — typically your name, email address, time zone and any answers to its questions — and shares it with us so the call can happen.

When you email us

We keep the correspondence and your address in our mailbox.

Automatically

Hosting and security logs. Our host, Vercel, processes standard request data (IP address, browser, requested page, time) to serve the site and protect it from abuse.
Cookieless site analytics. Vercel Web Analytics counts page views and a few actions, such as clicks on our buttons or finishing the response-time check on the homepage. It sets no cookies and does not identify you. The response-time check runs in your browser; your answers are not sent to us as anything more than that anonymous count.
Session storage. Your browser keeps the campaign details you arrived with, and after you send the Growth Blueprint form, your name and email so the booking calendar can be prefilled. This stays on your device and is cleared when you close the tab.

Only if you allow it

Google Analytics (analytics cookies): which pages are useful and how people move through the site.
Meta Pixel (marketing cookies): whether our Facebook and Instagram ads lead to requests and bookings.

Neither loads until you choose it in the cookie banner. See the Cookie Policy.

Why we use it

To prepare and send your Growth Blueprint.
To reply to you and to schedule and hold calls you book.
To send you the emails you agreed to when you asked for the Blueprint. Reply to any of them to ask us to stop, and we will.
To understand which pages help, so we can improve the site.
To measure whether our ads work, if you allow marketing cookies.
To keep the site secure.

Who processes it for us

Each of these handles data on our behalf, under its own terms:

Resend — delivers each Growth Blueprint request to our mailbox as an email.
Calendly — scheduling.
Vercel — hosting and cookieless analytics.
Supabase — the database and image storage behind the blog.
Google (Analytics) and Meta (Pixel) — only if you allow them.
Our email provider — receiving and replying to your messages.

We don't sell your data

We do not sell personal information, and we never share it with anyone to market their products.

If you allow marketing cookies, the Meta Pixel sends information about your visit to Meta so we can measure our ads. Some US state laws call that "sharing" for targeted advertising. It does not happen unless you choose it, you can withdraw that choice at any time, and we treat a Global Privacy Control signal from your browser as a refusal.

International transfers

We operate from India, and the providers above may process data in the United States, India or elsewhere. By using the site, you understand your information may be processed outside your own country.

How long we keep it

Growth Blueprint requests and our emails with you: in our mailbox until you ask us to delete them. Resend keeps its own delivery records for a limited time.
Booking details: as long as we need them for the call and any follow-up, and as Calendly retains them.
Analytics: according to each provider's default retention settings.
Session storage: until you close the tab.
Your cookie choice: six months, then we ask again.

Your rights

Wherever you are, you can ask to see what we hold about you, correct it, delete it, or withdraw consent you gave. You can reply to any email we send to ask us to stop, and you can change your cookie choices on the Cookie Policy page. Email adith@brightroi.co and we will tell you what we did.

In the United States, some states — including California under the CCPA as amended by the CPRA — give you the right to know, delete and correct personal information, and to opt out of its sale, its sharing for cross-context behavioural advertising, and targeted advertising. We don't sell it; to opt out of sharing, reject marketing cookies or turn on Global Privacy Control. We will not treat you differently for using any of these rights.

In India, the Digital Personal Data Protection Act, 2023 gives you the rights to access information about your data, to have it corrected, completed, updated or erased, to withdraw consent, to nominate someone to act for you, and to have a grievance addressed. Our contact for grievances is Adith Penta, adith@brightroi.co. If you are not satisfied with our response, you may approach the Data Protection Board of India.

In the EU or UK, the GDPR gives you equivalent rights, including the right to complain to your data protection authority.

Children

This site is for businesses and is not directed at anyone under 18. We do not knowingly collect their information; if you believe we have, tell us and we will delete it.

Changes to this policy

When what we collect changes, this page changes with it and the date at the top is updated. A new tracking tool is described here before it goes live.

Contact

BrightROI, Hyderabad, Telangana, India. Email adith@brightroi.co.