Privacy Policy

What we collect

When you ask for a free visibility check

The form asks for your business name, the city or area you work in, your main service, your website (or that you don't have one yet), your first name and your email address. Alongside those we record the page you sent it from, the campaign tags in the link you arrived by (such as utm_source), and the website that referred you, if any.

We email a copy of your request to our own mailbox and save it in our database, which Supabase runs for us, together with a summary of what your instant report found (your website's score and the result of each check) and, if we found your Google Business Profile, Google's ID for it (its place ID). The website can add a request to that database but cannot read one back; only we can, signed in to Supabase.

To prepare your check we look at information that is already public: your business listing on Google and Maps, your website, your public reviews and those of nearby competitors, and what AI assistants such as ChatGPT say when asked about businesses like yours. We don't log in to any of your accounts to do it.

When you ask for a free check on our India page

The form on our India page asks for your name, your business name, your area and your WhatsApp number, and, if you like, your email address. Alongside those we record the page you sent it from, the campaign tags in the link you arrived by and the website that referred you, if any, and the wording of the consent line you saw.

The form sends this to n8n, the automation tool we run on our own server, which saves it in our lead table and alerts us. If that doesn't work, it is emailed to our own mailbox instead. We use your details to run your free visibility check, to message you about it on WhatsApp, to give you the free guide, now and then to send a useful tip by WhatsApp or email, and to follow up about a free call. Reply STOP on WhatsApp, or unsubscribe from any email, and we stop.

If you tap "WhatsApp us" instead, WhatsApp opens with a message ready for you to finish and send. The link carries no personal details. If you send it, we receive your WhatsApp number and what you write, in WhatsApp.

When we look your business up on Google

To show your Google profile basics, our server sends Google Maps Platform (the Places API) your business name with your city, and your main service with your city. Google uses them to find your public Business Profile and the other businesses it lists for that search, and receives those words, never your name or email. What Google returns is shown on your report page as it arrives and is not stored by us; the only thing we keep is your profile's place ID, saved with your request so we can find it again on the call.

When we run your instant report

Our server visits the website you gave us — its homepage, its robots.txt file and its sitemap — the way a search engine would, and reads what any visitor could see. It also sends the website's address to Google PageSpeed Insights, which loads the site to measure its speed. Google receives the address of the website, never your name or email. What we find describes the website, not you. If you tell us you don't have a website yet, none of this runs.

When you book a call

Booking is handled by Calendly, embedded on our contact page, on the visibility report and thanks pages, and on our India page once you have sent its form. Calendly collects what you enter there — typically your name, email address, time zone and any answers to its questions — and shares it with us so the call can happen.

When you email us

We keep the correspondence and your address in our mailbox.

Automatically

• Hosting and security logs. Our host, Vercel, processes standard request data (IP address, browser, requested page, time) to serve the site and protect it from abuse.
• Cookieless site analytics. Vercel Web Analytics counts page views and a few actions, such as clicks on our buttons, sending the visibility check form, opening the visibility report, clicking one of the four areas we check on a call, or finishing the "Who gets the call?" check on the homepage. It sets no cookies and does not identify you, and none of these events carries your name, email or website. Your answers to that check stay in your browser: only the fact that someone finished it is counted.
• Session storage. Your browser keeps the campaign details you arrived with. After you send the visibility check form it also keeps a report token (your website's address if you gave one, and your business name, city and main service, encrypted so only our server can read them), which opens your report, and your name and email so the booking calendar can be prefilled. After you send the form on our India page it keeps your name and email for the same reason. This stays on your device and is cleared when you close the tab.

Only if you allow it

• Google Analytics (analytics cookies): which pages are useful and how people move through the site.
• Google Ads (marketing cookies): whether someone who clicked one of our Google ads went on to ask for a visibility check or book a call. Google receives that your visit came from an ad, the page, that the request or booking happened with a random reference number so it isn't counted twice, and the usual technical details of a web request, such as your IP address and browser. We never send it your name, email or phone number, in any form.
• Meta Pixel (marketing cookies): whether Facebook and Instagram ads lead to requests and bookings, and whether our ads for the India page lead to requests. It only loads if we turn it on.

None of these loads until you choose it in the cookie banner. See the Cookie Policy.

Why we use it

• To run your free visibility check, including looking your business up on Google, and to send you one email with its top findings, a link back to the full report and a link to book the free consultation call.
• To reply to you about your visibility check, and to schedule and hold calls you book.
• To run the free check you asked for on our India page, give you the free guide, and follow up by WhatsApp or email, as that form says. Reply STOP or unsubscribe and we stop.
• To email you, now and then, a short tip, as the form says. We don't send any yet; when we do, every one will tell you how to unsubscribe, and one reply is enough to stop them.
• To understand which pages help, so we can improve the site.
• To measure whether our ads work, if you allow marketing cookies.
• To keep the site secure.

Who processes it for us

Each of these handles data on our behalf, under its own terms:

• Resend — delivers each visibility check request to our mailbox, and your report email to you.
• Supabase — stores visibility check requests in our database, and holds the blog's posts and images.
• Calendly — scheduling.
• n8n — the automation tool, on our own server, that saves India page requests and alerts us (through a Telegram bot, which receives the details you gave in the form).
• Vercel — hosting and cookieless analytics.
• Google PageSpeed Insights — measures the speed of the website you ask us to check. It receives the website's address only.
• Google Maps Platform (Places API) — looks up public Google listings for the business name, city and main service you give us. It receives those words only.
• Google (Analytics and Ads) and Meta (Pixel) — only if you allow them.
• Our email provider — receiving and replying to your messages.

We don't sell your data

We do not sell personal information, and we never share it with anyone to market their products.

If you allow marketing cookies, Google Ads (and the Meta Pixel, if we use it) receives information about your visit so we can measure our ads. Some US state laws call that "sharing" for targeted advertising. It does not happen unless you choose it, you can withdraw that choice at any time, and we treat a Global Privacy Control signal from your browser as a refusal. You can also manage how Google uses ad data at myadcenter.google.com.

International transfers

We operate from India, and the providers above may process data in the United States, India or elsewhere. By using the site, you understand your information may be processed outside your own country.

How long we keep it

• Visibility check requests, India page requests and our messages with you: in our database, our lead table and our mailbox until you ask us to delete them. Resend keeps its own delivery records for a limited time.
• Your report link: the link in your report email works for 30 days. After that it no longer opens anything.
• Google listing results: not stored. Your report page shows them as Google returns them; only your profile's place ID is kept, with your request.
• Speed results: Google PageSpeed Insights results for a website address are kept on our host for 24 hours, so opening the report again doesn't re-run the test. They describe the website, not you.
• Booking details: as long as we need them for the call and any follow-up, and as Calendly retains them.
• Analytics: according to each provider's default retention settings.
• Session storage: until you close the tab.
• Your cookie choice: six months, then we ask again.

Your rights

Wherever you are, you can ask to see what we hold about you, correct it, delete it, or withdraw consent you gave. You can reply to any email we send to ask us to stop, and you can change your cookie choices on the Cookie Policy page. Email adith@brightroi.co and we will tell you what we did. Asking us to delete your visibility check request removes it from our database and our mailbox.

In the United States, some states — including California under the CCPA as amended by the CPRA — give you the right to know, delete and correct personal information, and to opt out of its sale, its sharing for cross-context behavioural advertising, and targeted advertising. We don't sell it; to opt out of sharing, reject marketing cookies or turn on Global Privacy Control. We will not treat you differently for using any of these rights.

In India, the Digital Personal Data Protection Act, 2023 gives you the rights to access information about your data, to have it corrected, completed, updated or erased, to withdraw consent, to nominate someone to act for you, and to have a grievance addressed. Our contact for grievances is Adith Penta, adith@brightroi.co. If you are not satisfied with our response, you may approach the Data Protection Board of India.

In the EU or UK, the GDPR gives you equivalent rights, including the right to complain to your data protection authority.

Children

This site is for businesses and is not directed at anyone under 18. We do not knowingly collect their information; if you believe we have, tell us and we will delete it.

Changes to this policy

When what we collect changes, this page changes with it and the date at the top is updated. A new tracking tool is described here before it goes live.

Contact

BrightROI, Hyderabad, Telangana, India. Email adith@brightroi.co.