Bright Credmere Privacy Policy
Updated 1 May 2025
Bright Credmere Pty Ltd ("Bright Credmere", "we", "us" or "our") takes privacy seriously. This policy describes how we collect, use, disclose and protect information when you visit our website bright-credmere-au.live and use our AI trading platform, together called the "Service". Please review these terms carefully. If you disagree with them, discontinue use of the Service.
1. Data we collect
1.1 Details you submit
When you open an account or use the Service, we may collect the following:
- Identity information: given name, family name and date of birth.
- Contact information: email, telephone number and residential address.
- Financial information: broker API keys (read-only or execution), investment choices and risk parameters. We do not retain full broker login credentials or payment-card numbers.
- Account profile: username, preferred trading approaches and alert settings.
- Correspondence: messages sent to us through support channels or email.
1.2 Data gathered automatically
Using the Service causes certain technical details to be collected automatically:
- IP address, browser and browser version, plus operating system.
- Visited pages, features accessed, time on the Service and clickstream information.
- Device identifiers and mobile advertising identifiers where relevant.
- Information about cookies and tracking tools (see our Cookie Policy).
1.3 Data received from others
Information may come to us from identity-check providers, fraud-prevention services and analytics partners. We may combine it with information already held to improve security and accuracy.
2. How we use data
Collected information may be used to:
- Open and administer your account and deliver the Service.
- Handle trading signals and automated orders through connected brokers.
- Tailor your experience and surface useful market information.
- Send service messages, including confirmations, trading notices and security alerts.
- Send promotional messages where you have consented or the law permits it.
- Identify, examine and stop fraud or other unlawful conduct.
- Meet applicable legal and regulatory responsibilities.
- Improve, test and create Service features using aggregated, anonymised information.
3. Processing grounds for EEA and UK users
For people in the European Economic Area or United Kingdom, personal information is processed on these legal grounds:
- Contract performance: to deliver the Service requested when you register.
- Legitimate interests: including security, fraud prevention and improving the product.
- Legal requirement: including financial-regulation and tax-law compliance.
- Consent: for marketing and optional cookies, which you may withdraw at any time.
4. When information is shared
We do not sell personal information. It may be disclosed to:
- Service suppliers: cloud hosting, email, analytics and support providers required by contract to protect your information.
- Linked brokers and exchanges: only the API instructions needed to carry out the strategy you configure.
- Public authorities: where legally required, ordered by a court or necessary to defend our rights.
- Corporate transactions: during a merger, acquisition or asset transfer, provided the purchaser continues to observe this policy.
5. Transfers across borders
Bright Credmere operates internationally. Your personal information may be transferred to and handled in jurisdictions outside Australia, including the United States and the European Union. Where applicable, we rely on approved Standard Contractual Clauses to protect international data transfers.
6. How long we retain data
We keep personal information while your account remains open or while needed to provide the Service. After closure, some records may be retained for up to seven years to meet financial regulatory duties. Aggregated and anonymised analytics may be kept without a fixed end date.
7. Your privacy rights
Subject to your location, you may be entitled to:
- Obtain a copy of the personal information we hold.
- Ask us to correct incomplete or incorrect information.
- Ask for deletion of your information, sometimes called the “right to be forgotten”.
- Object to, or request limits on, particular processing.
- Receive your information in a structured, machine-readable form for portability.
- Withdraw consent at any point, without changing the lawfulness of earlier processing.
To make a rights request, contact us at . We aim to reply within 30 days.
8. Keeping information secure
Our safeguards include TLS 1.3 encryption during transmission, AES-256 encryption at rest, multi-factor authentication, role-based permissions and annual independent penetration tests. No system can be guaranteed completely secure. Use a strong, unique password and turn on two-factor authentication.
9. Cookies and similar tools
Cookies and comparable tracking technologies help us run and improve the Service. Further information is available in our Cookie Policy.
10. Children’s information
The Service is not intended for anyone under 18. We do not knowingly gather children’s personal information. If you believe a child has sent us personal data, contact us and we will delete it promptly.
11. Revisions to this policy
We may change this Privacy Policy periodically. Significant changes will be communicated through a website notice or email. If you keep using the Service after the effective date, you accept the amended policy.