Bright India AI

Privacy Policy

This policy explains how we collect, use, disclose, store and protect your personal information when you use the Bright India AI website, mobile applications and related services.

01Introduction

Bright India AI ("we," "us," "our," or "Bright India AI") is a digital platform operated by Bright India AI Private Limited. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you access our website, mobile applications or related services (collectively, the "Platform").

Bright India AI helps users discover and connect with businesses, professionals and service providers.

We are committed to handling personal information responsibly and in accordance with applicable Indian law.

02Information We Collect

Depending on the features you use, we may collect the following information.

2.1 Personal and Profile Information

  • Name and email address.
  • Date of birth and profile details.
  • Business or professional information that you choose to provide.
  • Information submitted when contacting customer support.

2.2 Account and Authentication Information

We may collect account identifiers, authentication records and information necessary to create, maintain and secure your account.

We will use appropriate safeguards when handling authentication credentials.

2.3 Location Information

If you enable location access or provide location details, we may use this information to support location-based discovery or help you find relevant businesses and services.

You may disable device location permissions through your device settings. Features that depend on location may not work when permission is disabled.

2.4 Technical and Usage Information

We may process technical information necessary to operate and secure the Platform, such as IP address, device and operating-system information, app version, access timestamps, diagnostic records and security logs, where collected by our systems.

2.5 Payment Information

Bright India AI is intended to facilitate business and service connections, not to process marketplace transactions.

We do not intend to collect payment-card details for business-to-business or service-provider transactions through the Platform. If paid subscriptions or other direct payments are introduced, we will provide appropriate information about the payment data collected and the relevant payment processor before those features are used.

03How We Use Personal Information

We may use personal information to:

  1. Create and manage accounts.
  2. Authenticate users and protect account security.
  3. Enable users to discover and connect with businesses and service providers.
  4. Display profiles and relevant information.
  5. Provide location-based discovery when enabled.
  6. Respond to support requests and complaints.
  7. Maintain, troubleshoot and improve the Platform.
  8. Detect fraud, abuse, unauthorised access and security incidents.
  9. Enforce our Terms and Conditions.
  10. Comply with applicable laws and lawful requests.

We will not use personal information for purposes materially different from those disclosed to you without providing any notice or obtaining any consent required by law.

04Consent and User Choices

Where required by applicable law, we will provide an appropriate notice and obtain consent before processing personal information.

You may decline optional permissions, including location access, through the available settings. Some features may become unavailable if the required permission is declined.

Where processing is based on consent, you may withdraw consent using available account controls or by emailing [email protected].

Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We will handle withdrawal requests in accordance with applicable law.

05Sharing and Disclosure

We do not sell personal information or intend to disclose it to third parties for their independent advertising purposes.

We may share or permit access to information only as reasonably necessary for the following purposes.

5.1 Essential Service Providers

We may use providers for website and application hosting, database infrastructure, authentication, security, maintenance and customer support.

Such providers should receive only the information needed to perform their assigned functions and be subject to appropriate confidentiality and security obligations.

5.2 Legal and Security Requirements

We may disclose information when required by law or valid legal process, or where reasonably necessary to protect the rights, safety or security of users, the company or others, subject to applicable law.

5.3 Business Transfers

If the company undergoes a merger, restructuring, acquisition or transfer of assets, information may be transferred where legally permitted and subject to applicable privacy requirements.

We do not authorise service providers to use personal information for unrelated purposes merely because they provide services to us.

06Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal obligations.

Our retention schedule will specify periods for:

  • Account and profile information.
  • Support requests and complaints.
  • Security and diagnostic logs.
  • Consent and permission records.
  • Information that must be retained to comply with legal obligations.

The exact periods must be established in our operational retention schedule and applied consistently. When information is no longer required, we will delete or irreversibly anonymize it, unless retention is legally required or otherwise permitted.

07Data Security

We will implement reasonable technical and organisational safeguards appropriate to the personal information we process. These may include access restrictions, secure authentication, encryption in transit, security monitoring, backups and controlled administrative access.

No electronic system can be guaranteed to be completely secure. We will take appropriate steps to investigate and respond to suspected security incidents and provide notifications where required by law.

08Children's Privacy

Bright India AI is intended to be accessible to users of all ages, subject to applicable age-related legal requirements and safeguards.

Where applicable law requires verifiable parental or guardian consent before processing a child's personal data, we will implement an appropriate consent process.

We will not knowingly enable features or processing that are prohibited for children under applicable law. Any age-assurance, parental-consent or child-safety controls will be implemented according to the features offered and the legal requirements in force.

Parents or guardians who have concerns about a child's personal information may contact [email protected].

09Your Privacy Rights

Subject to applicable law, you may be entitled to:

  • Request information about personal data processed about you.
  • Request correction or updating of inaccurate information.
  • Request erasure of personal information where applicable.
  • Withdraw consent where processing is based on consent.
  • Raise a grievance or privacy complaint.
  • Exercise any other rights available under applicable law.

We may request information reasonably necessary to verify your identity before acting on a request.

To exercise these rights, contact [email protected].

10Account Deletion

You may request deletion of your account through available account controls or by contacting [email protected].

Following a valid request, we will delete or anonymize personal information that is no longer required, subject to applicable legal retention requirements, unresolved disputes, security needs and other lawful exceptions.

Deleting the app from your device may not delete your account or information held on our servers. Please use the account-deletion process or contact us to request deletion.

11Third-Party Services

The Platform may rely on essential infrastructure, hosting, authentication or other technical service providers.

External websites or services linked from Bright India AI may operate under their own terms and privacy policies. This Policy does not govern the independent processing activities of those third parties.

We will describe material third-party data processing where required by applicable law.

12International Transfers

Depending on the service providers and infrastructure used, personal information may be processed or stored outside India.

Where international transfers occur, we will comply with applicable Indian legal requirements and any relevant restrictions or safeguards.

13Changes to This Policy

We may update this Privacy Policy to reflect changes to the Platform, our practices or applicable law.

We will revise the "Last Updated" date and provide notice or obtain consent where required by law.

14Contact Information and Grievances

Contact us at the email above for privacy questions, access or deletion requests, and complaints.

We will address grievances within the timelines required by applicable law. If a separate grievance officer or other designated contact is legally required, their details will be published here.

15Applicable Law

This Policy is intended to comply with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, and the provisions of the Digital Personal Data Protection Rules, 2025, as and when applicable.

Nothing in this Policy limits any right that cannot lawfully be excluded.