Privacy Policy

Last updated: February 11, 2026

BrightFeed ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our content aggregation service at brightfeed.io and app.brightfeed.io (the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (used for authentication and account recovery)
• Name (as provided by your identity provider)
• Profile picture (if provided by your identity provider)

1.2 Content from Connected Sources

When you connect external sources to BrightFeed, we access and store content from those sources to power your feeds. The specific data accessed depends on the source type:

1.3 Usage Data

We automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Feature usage (which feeds you use, search queries within the app)

2. Gmail Data Disclosure

2.1 What Gmail Data We Access

When you connect your Gmail account, BrightFeed uses the gmail.readonly scope to access:

• Email message content (subject lines, body text, attachment metadata)
• Email metadata (sender, recipients, dates, labels, thread information)
• Email headers

We access your email in read-only mode. We cannot send, modify, or delete your emails.

2.2 How We Use Gmail Data

We use your Gmail data to:

• Store and index email content so you can search and browse it within BrightFeed
• Analyze content using AI to extract topics, summaries, and priority signals
• Categorize and organize your emails based on extracted metadata

2.3 How We Store Gmail Data

• Email content is stored in our database and indexed in our search engine
• Data is protected using industry-standard security measures
• OAuth tokens are stored with encryption

2.4 Gmail Data Sharing

We do not sell, rent, or share your Gmail data with third parties except:

• AI Service Providers: We send content to AI providers for analysis. These providers process data according to their data handling policies and do not retain your content after processing.
• Legal Requirements: We may disclose data if required by law, subpoena, or court order.

2.5 Gmail Data Retention and Deletion

You control your Gmail data:

• Account deletion: Deleting your BrightFeed account deletes all associated data, including Gmail content, from our database and search index.
• Revoke access: You can revoke BrightFeed's access to Gmail at any time through your Google Account permissions.

3. How We Use Your Information

We use your information to:

• Provide the Service: Store, index, and organize your content so you can search and browse it
• Analyze content: Use AI to extract topics, summaries, priority signals, and categories from your content
• Improve the Service: Understand usage patterns to improve features and fix issues
• Communicate with you: Send service-related emails (security alerts, important updates)
• Ensure security: Detect and prevent fraud, abuse, and security threats

4. How We Share Your Information

We do not sell your personal data. We share information only in these circumstances:

4.1 Service Providers

We use third-party services to operate BrightFeed:

• Cloud Infrastructure: Amazon Web Services (AWS) for hosting and storage
• AI Analysis: AI service providers for content analysis
• Authentication: Google OAuth for sign-in

4.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal process (subpoena, court order)
• Protect our rights, property, or safety
• Prevent fraud or security threats

4.3 Business Transfers

If BrightFeed is acquired or merged, your data may be transferred. We will notify you before your data is subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption, access controls, and regular security reviews.

6. Data Retention

We retain your account information and content from connected sources until you delete your account. When you delete your account, your data is permanently removed from our systems.

7. Your Rights and Choices

7.1 Deletion

You can delete all your data by deleting your BrightFeed account.

7.2 Revoke Access

You can revoke BrightFeed's access to connected accounts (like Gmail) at any time through your Google Account permissions at myaccount.google.com/permissions.

8. Children's Privacy

BrightFeed is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us and we will delete it.

9. International Data Transfers

BrightFeed is based in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using BrightFeed, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated date
• Sending an email notification for significant changes

Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@brightfeed.io