Legal
Privacy policy
Effective August 2026
The short version
- Your firm's documents and your clients' documents belong to you. We never sell data, never mine documents for advertising, and never train models on your files.
- We collect what the service needs to run: account details, billing information, and operational logs.
- You can export everything as a zip and delete your account at any time.
What we collect
Account information. Name, email address, and password hash for staff and portal accounts; firm name and branding assets for white-label firms.
Content you store. Documents, folders, requests, messages, and related metadata your firm and its clients put into the service. This content is processed only to provide the service: storing, displaying, notifying, and generating the receipts and audit trails the product exists for.
Operational data. Sign-in events, document access events (the audit trail), and technical logs needed to keep the service secure and reliable, including IP addresses on security-relevant events.
Billing. Payment is handled by our payment processor; we do not store card numbers.
What we never do
- Sell or rent personal data or documents to anyone.
- Read documents except when strictly required to operate the service or when you ask us to for support.
- Use your documents or your clients' documents to train machine-learning models.
- Send marketing email to your firm's clients. They are your clients, not our leads.
Where data lives
Documents are stored in encrypted object storage and travel over TLS. Uploads and downloads move directly between the browser and storage using short-lived signed URLs.
Data retention and deletion
Deleted files sit in a 30-day trash for recovery, then purge. When a firm deletes its account, its content is removed from the live system and expires from backups on their rotation schedule. You can export all documents as a zip before leaving.
Cookies
The marketing site sets no advertising or cross-site tracking cookies. The application uses session cookies required for sign-in.
Contact
Privacy questions: support@brightreturn.com.