This Privacy Policy explains what information BrightAssessment (“we,” “us”) collects when you use our website and product, how we use it, and the choices you have. By using BrightAssessment you agree to the practices described here.
1. Information we collect
We collect the following categories of information:
- Account information. Your name, email address, and a hashed password when you create an account.
- Assessment data. The target role you choose, the answers you submit during the assessment, and the scores and insights we generate from them.
- Resume data. Resumes you upload or generate, including any text, work history, and skills they contain.
- Payment information. Order metadata returned by Stripe. We never see or store your full card number.
- Usage information. Standard log data such as IP address, browser type, pages visited, and timestamps, used to keep the service secure and reliable.
2. How we use information
- To run the assessment and produce your results report.
- To generate and store your resume.
- To process payments and send order receipts.
- To authenticate you and keep your account secure.
- To improve our prompts, scoring, and product experience.
- To comply with legal obligations.
3. AI processing
To generate questions, scores, and resumes, we send relevant pieces of your input to third-party AI providers (currently OpenAI). These providers process the data on our behalf under their own data processing terms and do not use it to train their public models.
4. Sharing
We do not sell your personal information. We share data only with service providers that help us run BrightAssessment, including:
- Supabase, for authentication and database hosting.
- Stripe, for payment processing.
- OpenAI, for assessment and resume generation.
- An email delivery provider, for transactional messages.
We may also disclose information when required by law or to protect the rights, safety, or property of users or the public.
5. Retention
We keep your account, assessment, and resume data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business records (for example, payment records).
6. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights from your account settings or by contacting us via the in-app support link.
7. Security
We use industry-standard measures to protect your data in transit and at rest, including TLS for all network traffic and encrypted storage of passwords. No system is perfectly secure, but we work to keep yours safe.
8. Children
BrightAssessment is not directed to children under 16, and we do not knowingly collect personal information from them.
9. Changes
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, for material changes, notify you by email or in-app message.
10. Contact
If you have questions about this Privacy Policy or your data, reach out from your account’s support menu and we will respond within a reasonable time.