Privacy Policy

How Bright AI Limited collects, uses, stores, and protects personal data

2026/07/23

Introduction

This Privacy Policy explains how Bright AI Limited, a Hong Kong limited company ("we", "us", or "our"), handles personal data when you use our website and AI image and video generation services.

Data We Collect

Account and Contact Data

  • Name and email address
  • Authentication identifiers
  • Account settings
  • Customer service communications

Billing and Transaction Data

  • Subscription, credit package, and billing status
  • Transaction IDs, product references, purchase dates, and payment status
  • Refund, fraud-prevention, and dispute records

Payments are handled by payment providers such as Stripe. We do not store full payment card numbers.

Usage and Technical Data

  • IP address, browser, device, and operating system
  • Pages visited, feature usage, timestamps, and log events
  • Error diagnostics, cookies, fraud signals, and security records

User Content

  • Prompts, uploaded images, videos, and other generation inputs
  • Generated outputs
  • Task settings, status, and related metadata
  • Moderation and safety results

How We Use Data

We process data to:

  • Create and secure accounts
  • Deliver AI generation and storage features
  • Add purchased credits and manage subscriptions
  • Process renewals, cancellations, refunds, and disputes
  • Provide customer support
  • Prevent fraud, abuse, and prohibited content
  • Diagnose errors and improve service reliability
  • Meet accounting, tax, legal, and regulatory obligations

AI Training

Bright AI Limited stores user inputs, generated outputs, and related task data in its databases as needed to provide account history and the Service. We do not use customer prompts, uploads, or generated outputs to train AI models.

Third-party providers process content only as needed to provide the selected generation feature, subject to their contractual and technical role in the Service.

Depending on the applicable law, processing may rely on:

  • Performance of a contract
  • Legitimate interests, including security, fraud prevention, and service operation
  • Consent where required
  • Compliance with legal obligations

Service Providers and Transfers

We may use payment processors, AI infrastructure providers, hosting and storage providers, analytics tools, authentication providers, and email services. Data may be processed outside the customer's country. We use reasonable contractual, organizational, and technical safeguards where required.

We do not sell personal data.

Retention

Account, user-content, and generation data may remain stored in our databases while an account is active and afterward for legitimate service, support, security, backup, dispute, accounting, and legal purposes.

Retention periods vary by data type and legal requirement. Customers may request deletion, subject to records we must retain for fraud prevention, billing, disputes, tax, or other legal obligations.

Customer Rights

Depending on location, customers may have rights to request access, correction, deletion, portability, objection, restriction, or withdrawal of consent.

Send privacy requests from the account email to support@brightailimited.com. We may verify identity before completing a request.

Security

We use reasonable administrative, technical, and organizational safeguards. No online service can guarantee absolute security.

Children

The Service is intended for adults aged 18 or older. We do not knowingly offer accounts to children. If we learn that we hold personal data from a child using the Service without valid authorization, we will take appropriate deletion and account-protection steps.

Cookies

We use necessary cookies for authentication, security, preferences, and core functionality. Additional information is available in our Cookie Policy.

Changes

We may update this policy and will post the current version and revised date on this page.

Contact

Last Updated: July 23, 2026