Privacy Policy

We believe in transparency about how we collect, use, and protect your personal information. This policy explains our practices and your rights regarding data privacy.

Last updated: March 15, 2025

Information We Collect

When you interact with our software application protection services, we collect information that helps us provide better security solutions and support for your applications.

Application Data

Information about your software applications, including metadata, usage patterns, and security configurations necessary for protection implementation.

Account Information

Your name, email address, company details, and contact preferences when you create an account or request our services.

Technical Data

System information, IP addresses, browser details, and interaction logs that help us maintain service security and performance.

Communication Records

Messages, support tickets, and feedback you share with our team to improve service delivery and resolve issues.

How We Use Your Information

Your information helps us deliver effective application protection services while maintaining the highest security standards.

  • Implementing and maintaining security measures for your software applications
  • Providing technical support and troubleshooting assistance
  • Communicating service updates, security alerts, and important notifications
  • Analyzing threat patterns to improve our protection capabilities
  • Processing billing and managing your service subscriptions
  • Complying with legal obligations and industry security standards
  • Conducting security research to enhance our protection technologies

Data Storage and Security

We implement comprehensive security measures to protect your information throughout its lifecycle with us. All data is encrypted both in transit and at rest using industry-standard protocols.

Our security infrastructure includes multi-factor authentication, regular security audits, and access controls that limit data access to authorized personnel only. We maintain secure data centers with 24/7 monitoring and physical security measures.

Regular backups ensure data integrity, while our incident response team monitors for potential security threats continuously. We update our security practices regularly to address emerging threats and maintain compliance with international security standards.

Your Privacy Rights

Under Taiwan's Personal Data Protection Act and international privacy standards, you have several rights regarding your personal information.

Access Your Data

Request a copy of the personal information we hold about you, including how it's being used and who it's shared with.

Update Information

Correct or update any inaccurate or incomplete personal information we have on file.

Delete Your Data

Request deletion of your personal information, subject to legal and contractual obligations.

Restrict Processing

Limit how we use your information while maintaining essential security and service functions.

Data Portability

Receive your data in a structured format that you can transfer to another service provider.

Withdraw Consent

Revoke permission for data processing activities that require your explicit consent.

Data Retention Periods

We retain different types of information for varying periods based on legal requirements, business needs, and the nature of the data.

Active Account Data

Maintained throughout your active service period plus 12 months for support and legal compliance purposes.

Application Security Logs

Kept for 24 months to analyze threat patterns and maintain security effectiveness for ongoing protection services.

Communication Records

Support tickets and correspondence retained for 36 months to ensure service continuity and quality improvement.

Financial Records

Billing and payment information kept for 7 years as required by Taiwan accounting and tax regulations.

Information Sharing and Third Parties

We do not sell your personal information. We may share limited information with trusted partners who help us deliver our services, always under strict confidentiality agreements.

  • Cloud infrastructure providers for secure data hosting and processing
  • Security vendors who assist with threat detection and analysis
  • Payment processors for billing and subscription management
  • Legal authorities when required by law or to protect our legitimate interests
  • Professional service providers like auditors and legal counsel under confidentiality agreements

All third-party partners must meet our security standards and are contractually bound to protect your information with the same level of care we provide.

International Data Transfers

While our primary operations are based in Taiwan, some of our service providers and partners operate globally. When we transfer your information internationally, we ensure appropriate safeguards are in place.

We use standard contractual clauses, adequacy decisions, and other approved mechanisms to ensure your data receives equivalent protection regardless of where it's processed. All transfers comply with Taiwan's Personal Data Protection Act and international privacy frameworks.

Cookies and Tracking Technologies

Our website and services use cookies and similar technologies to enhance functionality, analyze usage, and improve security. We categorize these technologies based on their purpose and your control over them.

  • Essential cookies required for basic website functionality and security features
  • Performance cookies that help us understand how visitors interact with our services
  • Preference cookies that remember your settings and customization choices
  • Security cookies that detect suspicious activity and protect against threats

You can manage cookie preferences through your browser settings, though disabling essential cookies may affect service functionality.

Changes to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, legal requirements, and service offerings. When we make significant changes, we'll notify you through email or prominent notices on our website.

Minor updates that don't affect your rights or how we handle your data may be posted without individual notification. We encourage you to review this policy periodically to stay informed about our privacy practices.

Privacy Questions and Requests

If you have questions about this privacy policy or want to exercise your privacy rights, please contact our privacy team.

Email: contact@bright-rationale.com

Phone: +886 3 932 8928

Address: No. 46, Fuxing Rd, Yilan City, Yilan County, Taiwan 260

Response Time: We respond to privacy requests within 30 days