Privacy Policy

Last updated: October 2026

1. Introduction

Welcome to Brightdesk ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, phone number, and password when you create an account
  • Business Information: Business name, address, GST/tax numbers, logo, and signature
  • Client Data: Names, contact information, and booking details of your clients
  • Financial Information: Payment method details, invoice records, and transaction history
  • Usage Data: Information about how you use our platform, including features accessed and time spent

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Personalize and improve your experience

4. Data Storage and Security

Your data is stored on secure, enterprise-grade cloud servers. We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Row Level Security (RLS) ensuring you only access your own data
  • Regular security audits and monitoring
  • Secure authentication with optional OAuth providers

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party services that help us operate our platform (e.g., cloud hosting, analytics)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly agree to share information

6. Your Rights

You have the right to:

  • Access, update, or delete your personal information
  • Export your data in a portable format (Settings → Account → Download My Data)
  • Opt out of marketing communications
  • Request restriction of processing
  • Lodge a complaint with a data protection authority

7. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes. Analytics data is collected anonymously to improve our services.

8. Data Retention and Account Deletion

We keep your information while your account is active. You can download a copy of your data (CSV files) and delete your account at any time in Settings → Account, on the web or in the Brightdesk Android app, or at brightdesk.app/delete-account.

When you delete your account, right away:

  • Deleted: your business profile (business and owner name, email, phone, address, PAN/tax ID, logo, signature), your public page and portfolio photos, your saved payment details (bank, UPI), your devices' notification tokens, and your sign-in. You are signed out everywhere and the account can no longer be accessed. Signing in again with the same Google account creates a new, empty account.
  • Kept: the business records you created (bookings, invoices, payments, expenses, contracts, tasks, client names and contact details, and reviews), billing and subscription records, and a record of the deletion. These are kept indefinitely on our servers, are not linked to any active account, are not shown to anyone, and are used only for billing, fraud prevention and legal or tax obligations. Links you shared with clients (invoices, contracts, review requests) stop working.
  • Subscriptions: an active Pro subscription is cancelled.

9. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected]