Privacy Policy

1. Who We Are and Scope

This Privacy Policy explains how Bright on Analytics Ltd dba Trampolin.ai and its product Insights ("Trampolin.ai," "we," "us," or "our") collect, use, disclose, and safeguard information in connection with our websites (including, for example, trampolin.ai and insights.trampolin.ai) and related services, apps, and tools (collectively, the "Services").

"You," "your," or "user" means the individual or organization accessing or using the Services.

This Policy forms part of our Terms of Service.

For any questions or requests regarding this Policy or your personal data, contact [email protected].

2. Controller

Bright on analytics Ltd is the data controller for the processing of your personal data described in this Policy.

3. Information We Collect

A) Information You Provide

• Account & Profile Data: name, surname, email address, company/role (if provided), password or authentication details.
• Transactional & Billing Data: billing name, address, tax/VAT/registration numbers where applicable; payment details are processed by our payment processors (see Section 9).
• Communications & Support: content of messages, requests, feedback, and files you submit to us (e.g., support tickets, forms, surveys).
• Testimonials/Reviews: with your consent, statements you choose to provide for public display.

B) Information Collected Automatically

• Log & Device Data: IP address, device identifiers, browser type, ISP, operating system, referring/exit pages, date/time stamps, and error/crash reports.
• Cookies & Similar Technologies: we use cookies, device IDs, and similar technologies to operate, secure, and improve the Services (see Section 8).
• Usage Data & Analytics: pages viewed, features used, queries and actions taken, session duration, and performance metrics. We may use analytics tools (e.g., Google Analytics) to help us understand usage and improve the Services.

C) Publicly Available or Third-Party Sources

We may process information available from public sources or third-party partners (e.g., business contact data, platform signals) consistent with this Policy and applicable law.

4. How We Use Your Information

We process personal data as necessary for:

• Service delivery: create and manage accounts, authenticate users, provide features, process transactions, and deliver customer support.
• Safety, security, and integrity: monitor, prevent, and detect fraud, abuse, security incidents, and service disruptions.
• Improvements & research: troubleshoot, analyze performance, develop new features, conduct statistics and market analysis.
• Communications: send service, transactional, and administrative messages; respond to inquiries; collect feedback.
• Personalization & marketing (where permitted): tailor content, recommendations, and promotional messages.
• Legal compliance: comply with laws, enforce agreements, and protect our rights and users.

Legal bases: We rely on one or more of the following, as applicable: performance of a contract, legitimate interests (e.g., to secure and improve the Services), compliance with legal obligations, and your consent (e.g., for certain marketing or cookies where required). You can withdraw consent at any time where consent is the legal basis.

5. Direct Marketing

Where permitted by law or with your consent, we may use your contact details to send you marketing about Trampolin.ai related services and products and Insights. You can opt out at any time via in-message links, account settings (if available), or by emailing [email protected]. Opting out won't affect essential service or transactional communications.

6. How We Share Information

We share personal data only as described below and with appropriate safeguards:

• Service Providers / Processors: for hosting, customer support, communications, analytics, automation/integration, billing and payments, and advertising/retargeting (e.g., cloud providers, support tools, analytics providers such as Google Analytics, automation tools such as Zapier, review platforms such as Trustpilot, and advertising platforms such as Meta Ads and Google Ads, as applicable).
• Legal and Compliance: when required by law, regulation, subpoena, court order, or lawful request by public authorities (including to meet national security or law-enforcement requirements).
• Business Transactions: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
• Protection of Rights: to protect and defend our rights, property, users, or the public; to investigate, prevent, or address potential wrongdoing.
• With Your Consent: where you instruct or consent to a specific disclosure.

We do not sell your personal information.

7. Payment Information

We do not store full payment card numbers on our systems. Payments are processed by third-party processors (e.g., Stripe). Their processing of your personal data is governed by their privacy policies:

• Stripe: https://stripe.com/privacy

8. Cookies and Similar Technologies

Cookies are small text files placed on your device to operate and improve the Services, remember preferences, and analyze usage. Some cookies are essential; others (e.g., analytics/advertising) are optional and may require consent depending on your location.

• Manage cookies through your browser settings and, where available, our consent tools.
• Learn more about cookies generally at http://www.allaboutcookies.org/.

For more details about the specific cookies we use, please see our Cookie Policy.

9. Data Retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and for security and fraud-prevention purposes. Retention periods vary based on the data category and our legal/regulatory obligations.

10. Security

We implement technical and organizational measures designed to protect personal data (including physical, electronic, encryption where applicable and procedural safeguards) and routinely monitor our systems for vulnerabilities and attacks. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. International Transfers

Your information may be transferred to and processed in jurisdictions other than your own (including Hong Kong, United States of America, United Kingdom and other locations where we or our service providers operate). We apply appropriate safeguards consistent with applicable law for such transfers.

12. Your Rights

Depending on your location and applicable law, you may have rights such as:

• Access: request a copy of personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure/Restriction/Objection: request deletion or restriction of processing, or object to processing (including direct marketing).
• Portability: receive certain data in a structured, commonly used, machine-readable format.
• Withdraw Consent: where processing is based on consent, you can withdraw it at any time.
• Complain: lodge a complaint with your local data-protection authority.

To exercise rights, contact [email protected]. We may need to verify your identity before responding.

13. Third-Party Links and Services

The Services may link to third-party sites or services. Their privacy practices are not controlled by us. Please review their policies before providing personal information.

14. Sensitive Information

We do not seek to collect sensitive personal data (e.g., health, biometrics, precise geolocation where restricted, political opinions, religious beliefs, or sexual orientation). Please do not provide such data. If you believe you have provided it, contact [email protected] so we can address it appropriately.

15. Children's Privacy

Our Services are not directed to children, and we do not knowingly collect personal data from children where prohibited by law. If you believe a child has provided personal data to us, contact [email protected].

16. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a revised "Effective date." Material changes may also be communicated through the Services or by direct notice where appropriate. Your continued use of the Services after the effective date constitutes acceptance of the changes.

17. Acceptance

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

18. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Hong Kong Special Administrative Region (HKSAR), without regard to conflict-of-laws rules. The courts of Hong Kong SAR shall have exclusive jurisdiction over any disputes arising from or related to this Policy, subject to any applicable mandatory arbitration or consumer-protection provisions that cannot be waived.

19. Contact Us

Questions, requests, or complaints regarding this Privacy Policy can be sent to [email protected].