This Privacy Policy describes how Made by Maverick LLC, doing business as "Bright Kit Studio" (referred to as "we," "us," or "our"), collects, uses, and shares information when you visit our website at brightkit.studio, install or use any app we publish (including our Shopify app), or otherwise interact with us.
If you do not agree with this policy, please do not use our website or our products.
When you contact us by email or through a form, we collect the information you provide - typically your name, email address, and the content of your message. If you install one of our apps, the app may prompt you to provide additional information necessary for it to function.
Our website is intentionally lightweight and currently uses no third-party analytics, no advertising pixels, and no behavioral tracking. Our hosting provider (Cloudflare) processes standard server logs, which may include your IP address, browser type, and the pages you visit. These logs are used for security and to keep the site running, and are retained on a short rolling basis by Cloudflare.
We do not set any first-party cookies for tracking. If this changes in the future, we will update this policy and, where required, ask for your consent.
When you install one of our apps on a commerce platform such as Shopify, the platform grants us access to specific data from your store based on the permissions you approve at installation. Depending on the app and the permissions you grant, this may include:
We only request the scopes the app needs to do its job, and we only access data when the app is actively performing a task you or your store initiated.
Our collection and use of information from Shopify stores is also governed by Shopify's API Terms and the Shopify Partner Program Agreement, which we agree to as a Shopify Partner.
We use the information we collect to:
We do not use your data to train public AI models, and we do not use Shopify customer data for purposes unrelated to the app you installed.
We do not sell your personal information. We share information only in the limited circumstances below.
We use a small number of trusted vendors to help us operate our business (for example: our hosting provider for the website, our email provider for support correspondence, and the commerce platform you installed our app on). These providers only receive the information they need to perform their function, and are contractually bound to protect it and to use it only for us.
When you install our app through a platform such as Shopify, data flows between the platform and our app in accordance with the platform's own terms and the permissions you grant. The platform (Shopify) is independently a data controller for the data it holds about your store; please also review its privacy policy.
We may disclose information if we reasonably believe it is required by law, to comply with a valid legal process, to protect the rights, safety, or property of our users, the public, or us, or in connection with a merger, acquisition, or sale of all or part of our business. If a business transfer ever happens, we'll give reasonable notice before your information becomes subject to a different privacy policy.
We share information with other parties when you ask us to or explicitly authorize us to do so.
We keep your information only as long as we need it to provide our products, comply with legal obligations, resolve disputes, and enforce our agreements. Support correspondence is typically retained for a few years. Shopify app data is retained only while the app is installed; after uninstall, we delete or de-identify store data within 30 days, except where a platform requirement or legal obligation requires longer retention.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent you previously gave us.
If you are in the European Economic Area, the United Kingdom, or Switzerland (GDPR/UK GDPR): you have the rights above, plus the right to lodge a complaint with your local data protection authority. Our legal basis for processing is typically our legitimate interests in operating and improving our products, performance of a contract with you, or your consent where required.
If you are a California resident (CCPA/CPRA): you have the right to know what categories of personal information we collect and for what purposes, to request deletion, to correct inaccurate information, and to opt out of "sale" or "sharing" of personal information as those terms are defined under California law. We do not sell or share personal information for cross-context behavioral advertising. California residents may also designate an authorized agent to make a request on their behalf.
To exercise any of these rights, email us at hello@brightkitstudio.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising any of these rights.
We take reasonable administrative, technical, and physical measures to protect the information we collect from loss, theft, misuse, and unauthorized access. No system is perfectly secure, however, and we cannot guarantee absolute security. If we ever become aware of a security incident affecting your information, we will notify you to the extent required by applicable law.
We operate from the United States. If you access our website or use our products from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from those in your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Our website and products are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.
Our website may link to websites or services we don't operate (for example, a commerce platform's app store). We are not responsible for the privacy practices of those third parties; please review their own privacy policies.
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (such as an email or an in-app notice). Your continued use of our website or products after the change takes effect means you accept the updated policy.
If you have questions about this policy or want to exercise any of your rights, email us at hello@brightkitstudio.com.
Made by Maverick LLC
d/b/a Bright Kit Studio
United States