Privacy Policy

Bright Forest Software ("we," "us," or "our") operates the public company website at brightforest.com (the "Site"). This Privacy Policy explains what information we collect when you visit the Site or submit a business inquiry, how we use it, and the choices you have.

Product applications we operate (such as Budget Before Broke and Ember Studio) have their own privacy policies. This policy applies to the Bright Forest company website and contact form only.

We collect information in the following categories:

• Contact and inquiry information — when you submit our business inquiry form, we collect the fields you provide (such as name, email, company, phone, project details, budget range, and timeline).
• Staff authentication — if you sign in as authorized staff, we collect account information through Google OAuth (name, email, profile image) and session metadata (such as IP address and browser user-agent) as part of our authentication provider.
• Usage analytics — we use Vercel Analytics on the Site to understand aggregate traffic patterns. We do not use this Site for cross-context behavioral advertising.
• Technical data — standard server and CDN logs (such as page requests, referrer, and approximate location derived from IP) may be processed by our hosting provider.

We use the information above to:

• Respond to business inquiries and follow up about potential client engagements.
• Operate, secure, and improve the Site.
• Authenticate authorized staff and protect administrative areas.
• Send transactional emails related to inquiries (such as confirmation that we received your message).
• Comply with law and enforce our terms.

We do not sell your personal information. We share information only with service providers that help us run the Site, under contracts that limit their use of your data:

• Resend — delivery of inquiry notification and confirmation emails.
• Vercel — hosting, analytics, and infrastructure for the Site.
• Google — OAuth sign-in for authorized staff accounts (not required for public visitors).
• Database hosting — inquiry records are stored in our PostgreSQL database.

Business inquiries are retained so we can evaluate, respond to, and manage potential engagements. Staff may archive or delete inquiries when they are no longer needed for business purposes.

Authentication session data is retained according to our auth provider configuration and deleted when sessions expire or accounts are removed.

You may request access, correction, or deletion of inquiry information you submitted by contacting us at the email below. We may need to verify your request before acting on it.

If you are in a region with additional privacy rights, you may have the right to object to or restrict certain processing. Contact us to exercise those rights where applicable.

Questions about this Privacy Policy or our data practices: hello@brightforest.com.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date when we do. Continued use of the Site after changes means you accept the updated policy.