Privacy Policy
We believe in transparency about how we collect, use, and protect your personal information. This policy explains our practices and your rights regarding data privacy.
Last updated: March 15, 2025
Information We Collect
When you interact with our software application protection services, we collect information that helps us provide better security solutions and support for your applications.
Application Data
Information about your software applications, including metadata, usage patterns, and security configurations necessary for protection implementation.
Account Information
Your name, email address, company details, and contact preferences when you create an account or request our services.
Technical Data
System information, IP addresses, browser details, and interaction logs that help us maintain service security and performance.
Communication Records
Messages, support tickets, and feedback you share with our team to improve service delivery and resolve issues.
How We Use Your Information
Your information helps us deliver effective application protection services while maintaining the highest security standards.
- Implementing and maintaining security measures for your software applications
 - Providing technical support and troubleshooting assistance
 - Communicating service updates, security alerts, and important notifications
 - Analyzing threat patterns to improve our protection capabilities
 - Processing billing and managing your service subscriptions
 - Complying with legal obligations and industry security standards
 - Conducting security research to enhance our protection technologies
 
Data Storage and Security
We implement comprehensive security measures to protect your information throughout its lifecycle with us. All data is encrypted both in transit and at rest using industry-standard protocols.
Our security infrastructure includes multi-factor authentication, regular security audits, and access controls that limit data access to authorized personnel only. We maintain secure data centers with 24/7 monitoring and physical security measures.
Regular backups ensure data integrity, while our incident response team monitors for potential security threats continuously. We update our security practices regularly to address emerging threats and maintain compliance with international security standards.
Your Privacy Rights
Under Taiwan's Personal Data Protection Act and international privacy standards, you have several rights regarding your personal information.
Access Your Data
Request a copy of the personal information we hold about you, including how it's being used and who it's shared with.
Update Information
Correct or update any inaccurate or incomplete personal information we have on file.
Delete Your Data
Request deletion of your personal information, subject to legal and contractual obligations.
Restrict Processing
Limit how we use your information while maintaining essential security and service functions.
Data Portability
Receive your data in a structured format that you can transfer to another service provider.
Withdraw Consent
Revoke permission for data processing activities that require your explicit consent.
Data Retention Periods
We retain different types of information for varying periods based on legal requirements, business needs, and the nature of the data.
Active Account Data
Maintained throughout your active service period plus 12 months for support and legal compliance purposes.
Application Security Logs
Kept for 24 months to analyze threat patterns and maintain security effectiveness for ongoing protection services.
Communication Records
Support tickets and correspondence retained for 36 months to ensure service continuity and quality improvement.
Financial Records
Billing and payment information kept for 7 years as required by Taiwan accounting and tax regulations.
Information Sharing and Third Parties
We do not sell your personal information. We may share limited information with trusted partners who help us deliver our services, always under strict confidentiality agreements.
- Cloud infrastructure providers for secure data hosting and processing
 - Security vendors who assist with threat detection and analysis
 - Payment processors for billing and subscription management
 - Legal authorities when required by law or to protect our legitimate interests
 - Professional service providers like auditors and legal counsel under confidentiality agreements
 
All third-party partners must meet our security standards and are contractually bound to protect your information with the same level of care we provide.
International Data Transfers
While our primary operations are based in Taiwan, some of our service providers and partners operate globally. When we transfer your information internationally, we ensure appropriate safeguards are in place.
We use standard contractual clauses, adequacy decisions, and other approved mechanisms to ensure your data receives equivalent protection regardless of where it's processed. All transfers comply with Taiwan's Personal Data Protection Act and international privacy frameworks.
Cookies and Tracking Technologies
Our website and services use cookies and similar technologies to enhance functionality, analyze usage, and improve security. We categorize these technologies based on their purpose and your control over them.
- Essential cookies required for basic website functionality and security features
 - Performance cookies that help us understand how visitors interact with our services
 - Preference cookies that remember your settings and customization choices
 - Security cookies that detect suspicious activity and protect against threats
 
You can manage cookie preferences through your browser settings, though disabling essential cookies may affect service functionality.
Changes to This Policy
We review and update this privacy policy regularly to reflect changes in our practices, legal requirements, and service offerings. When we make significant changes, we'll notify you through email or prominent notices on our website.
Minor updates that don't affect your rights or how we handle your data may be posted without individual notification. We encourage you to review this policy periodically to stay informed about our privacy practices.
Privacy Questions and Requests
If you have questions about this privacy policy or want to exercise your privacy rights, please contact our privacy team.
Email: contact@bright-rationale.com
Phone: +886 3 932 8928
Address: No. 46, Fuxing Rd, Yilan City, Yilan County, Taiwan 260
Response Time: We respond to privacy requests within 30 days