Privacy Policy

Effective Date: August 6, 2026

1. Introduction

Brite, LLC (“Brite,” “we,” “our,” or “us”) provides a cloud-based learning management platform and related educational technology services that enable schools, tutoring centers, educational businesses, franchises, homeschool organizations, nonprofits, and other organizations (“Customers”) to deliver educational content, manage students, monitor learning progress, administer educational programs, and create or upload their own instructional content (collectively, the “Services”).

Educational content delivered through the Services may be licensed from independent content providers or created and uploaded by Customers. Brite provides the technology platform used to deliver such content but is not the author or publisher of most educational content made available through the Services.

Protecting the privacy and security of personal information is fundamental to the trust our Customers place in us. We recognize that many of our Customers serve children and young adults and expect the highest standards of privacy, confidentiality, and data protection.

This Privacy Policy explains how Brite collects, uses, stores, shares, protects, and otherwise processes Personal Information through our Services and the website located at https://gobrite.io, together with any related applications, APIs, integrations, and support services.

Unlike consumer applications that are intended for direct use by children, Brite is designed primarily for organizations that provide educational services. In most circumstances, Brite processes Student Information solely on behalf of its Customers and in accordance with their instructions.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Our Privacy Principles

Brite is committed to protecting the privacy of students, educators, administrators, and our Customers.

Our approach to privacy is guided by the following principles:

We collect only the information reasonably necessary to provide and improve our Services.
Student information belongs to and remains under the control of the Customer that created the student account.
We do not sell Student Personal Information.
We do not use Student Personal Information for behavioral advertising or marketing.
We process Student Information solely to provide the educational services requested by our Customers.
We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Information.
We strive to be transparent about our privacy practices and provide Customers with meaningful control over their information.

These principles guide our business practices and the operation of our Services.

3. Scope of this Privacy Policy

This Privacy Policy applies to Personal Information processed through:

the Brite learning management platform;
the Brite website located at https://gobrite.io;
customer administrator portals;
instructor portals;
student portals;
mobile applications (if any);
APIs;
integrations with third-party services;
customer support interactions;
sales and marketing communications;
other products or services that reference this Privacy Policy.

This Privacy Policy applies to:

visitors to our website;
prospective Customers;
Customers;
administrators;
instructors;
employees of Customer organizations;
students whose accounts are created by Customers;
parents or guardians who communicate with us;
individuals interacting with Brite regarding the Services.

This Privacy Policy does not apply to third-party websites, products, or services that are not owned or controlled by Brite, even if they are linked from our Services.

4. Definitions

For purposes of this Privacy Policy, the following definitions apply.

Account

An account created within the Services for a Customer, administrator, instructor, employee, student, or other authorized user.

Customer

Any school, tutoring center, educational business, franchise, nonprofit organization, homeschool organization, governmental entity, company, or other organization that licenses or otherwise uses the Services.

Customer Data

Information uploaded to, stored within, or generated through the Services by or on behalf of a Customer.

Content Provider

Content Provider means an independent organization that licenses educational curriculum, instructional materials, assessments, or other educational content for delivery through the Services.

Customer Content

Customer Content means educational content, documents, videos, assessments, images, assignments, or other instructional materials uploaded by a Customer for use within its own organization.

Personal Information

Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual.

Depending upon applicable law, Personal Information may also include “Personal Data” as defined under the GDPR or similar laws.

Student Information

Personal Information and educational records relating to students that are uploaded into, stored within, or generated through the Services.

Student Information may include educational records protected under applicable law.

Educational Record

Information directly related to a student that may constitute an education record under applicable law, including the Family Educational Rights and Privacy Act (FERPA), where applicable.

Services

The Brite learning management platform, website, APIs, software, integrations, customer support, documentation, and all related products and services provided by Brite.

Processing

Any operation performed on Personal Information, including collecting, storing, organizing, using, transmitting, disclosing, modifying, retrieving, deleting, or destroying such information.

5. Our Role

Brite generally provides software services to educational organizations and businesses.

For most Student Information processed through the Services, Brite acts solely as a technology service provider.

Our Customers determine:

which students receive accounts;
what information is uploaded;
which educational content is made available through the Services;
who may access educational records;
how long records should be retained;
when student accounts should be deactivated or removed; and
how the Services are used within their organization.

Brite processes Student Information only to provide the Services requested by the Customer.

Where applicable under privacy laws:

the Customer generally acts as the Data Controller, educational institution, school, or organization responsible for determining the purposes and means of processing Student Information; and
Brite generally acts as a Data Processor, Service Provider, or School Official (where applicable under FERPA) processing information solely on behalf of the Customer.

Nothing in this Privacy Policy changes the contractual relationship between Brite and its Customers.

6. Educational Content

Educational content made available through the Services may be:

licensed from independent Content Providers;
created or uploaded by Customers; or
otherwise made available through the Services pursuant to applicable agreements.

Content Providers retain ownership of their respective educational content.

Customers retain ownership of Customer Content they upload to the Services.

Except where Brite is identified as the creator of specific content, Brite is not the author, publisher, or owner of most educational content delivered through the Services.

Brite provides the technology platform used to host, organize, and deliver educational content but does not independently review, verify, or endorse all educational materials made available by Content Providers or Customers.

Information We Collect

The information we collect depends upon how the Services are used and the features selected by our Customers.

We collect information from the following categories:

Customer account information;
administrator information;
instructor information;
student information;
billing information;
technical and device information;
usage information;
communications with Brite;
information generated through normal operation of the Services.

The following sections describe each category in greater detail.

7. Customer Account Information

When a Customer subscribes to the Services or creates an administrative account, Brite may collect information such as:

organization name;
administrator name;
business address;
billing address;
email address;
telephone number;
payment information;
subscription information;
service configuration;
account preferences;
communications relating to the Services.

This information is used to establish, administer, secure, support, and bill Customer accounts.

8. Administrator and Instructor Information

Customers may create administrator and instructor accounts within the Services.

Depending on how the Customer configures the platform, Brite may process information such as:

name;
email address;
username;
job title;
organization;
permissions;
login history;
activity history;
courses created;
instructional materials uploaded;
communications conducted through the Services.

This information is processed solely to provide and administer the Services.

9. Student Information

Customers may create student accounts within the Services.

Depending upon how the Customer uses the platform, Student Information may include:

student name;
username;
student identification number;
email address (if provided by the Customer);
class enrollment;
course participation;
educational content completed;
grades;
quiz and assessment results;
attendance records;
progress reports;
instructor feedback;
assignment submissions;
certificates earned;
activity history;
login history;
other educational records or learning activity generated through the normal use of educational content delivered through the Services.

Brite processes Student Information only as necessary to provide the Services requested by the Customer.

Brite does not require Customers to upload information that is unnecessary for the educational purposes for which the Services are used.

10. Information Collected Automatically

When users access the Services, certain information may be collected automatically, including:

IP address;
browser type and version;
operating system;
device type;
referring website;
pages visited;
features used;
dates and times of access;
session duration;
diagnostic information;
error reports;
security logs;
usage analytics necessary to operate and improve the Services.

This information helps Brite maintain platform reliability, improve functionality, diagnose technical issues, detect unauthorized access, and protect the security of the Services.

11. Cookies and Similar Technologies

Brite uses cookies and similar technologies to operate, secure, and improve the Services.

Cookies are small text files stored on a user’s device that enable websites and applications to recognize returning users and remember certain preferences.

Depending on how the Services are used, Brite may use cookies and similar technologies to:

authenticate users and maintain secure sessions;
remember user preferences and settings;
improve website functionality;
analyze platform performance and usage trends;
monitor system reliability;
protect against fraud and unauthorized access; and
improve the overall user experience.

Most web browsers allow users to control cookies through browser settings. Disabling certain cookies may affect the functionality of portions of the Services.

12. Analytics

Brite may use internal analytics and trusted third-party analytics providers to better understand how the Services are used.

Analytics information may include:

pages viewed;
features used;
navigation patterns;
session duration;
device characteristics;
browser information;
performance metrics;
error reports.

Analytics are used to:

improve platform usability;
identify software defects;
optimize performance;
improve reliability;
understand feature adoption;
plan future product improvements.

Where practical, analytics are aggregated or de-identified.

Brite does not use analytics information to build marketing profiles of students.

13. How We Use Personal Information

Brite processes Personal Information only for legitimate business and educational purposes, including to:

provide the Services;
create and administer accounts;
authenticate users;
facilitate the delivery of educational content made available by Customers or Content Providers;
manage enrollments;
monitor learning progress;
provide grading and reporting functionality;
generate certificates and completion records;
provide customer support;
process payments;
communicate with Customers regarding their subscriptions;
maintain system security;
detect fraud or abuse;
troubleshoot technical issues;
improve platform functionality;
comply with legal obligations;
enforce our agreements.

Brite limits its processing of Student Information to the purposes necessary to provide the Services requested by the Customer.

14. Communications

Brite may communicate with Customers and authorized users regarding:

account administration;
billing;
subscription renewals;
service updates;
maintenance notices;
security alerts;
technical support;
product improvements;
changes to legal agreements;
changes to this Privacy Policy.

These communications are considered part of providing the Services.

Where permitted by applicable law, Brite may also send information regarding new features or educational resources to Customer administrators. Recipients may opt out of non-essential marketing communications at any time.

Brite does not send marketing communications directly to student users.

15. AI and Machine Learning

Brite may use artificial intelligence (“AI”), machine learning, or other automated technologies to improve certain aspects of the Services, including but not limited to:

generating educational insights;
improving search functionality;
assisting with customer support;
identifying platform errors;
enhancing system performance;
improving security monitoring.

Brite does not use Student Personal Information to train publicly available or general-purpose artificial intelligence models without the authorization of the applicable Customer.

Where AI-assisted features are offered within the Services, they are intended solely to support educational or administrative functions requested by the Customer.

Customers remain responsible for determining whether AI-enabled features are appropriate for their educational environment.

16. Information Sharing

Brite does not sell Personal Information.

Brite does not sell Student Personal Information.

Brite does not share Student Personal Information for behavioral advertising.

Brite may disclose Personal Information only under the circumstances described below.

A. Customer Access

Information is made available to the Customer that created or administers the applicable account.

Customers determine which administrators, instructors, or other authorized personnel may access Student Information.

B. Service Providers

Brite may share information with trusted service providers that assist in operating the Services.

Examples include providers of:

cloud hosting;
payment processing;
email delivery;
customer support software;
monitoring and security;
backup services;
analytics;
infrastructure management.

These providers receive only the information reasonably necessary to perform services for Brite and are contractually required to protect such information.

C. Legal Requirements

Brite may disclose Personal Information when we believe disclosure is reasonably necessary to:

comply with applicable law;
respond to lawful legal process;
comply with court orders;
cooperate with law enforcement where legally required;
protect the rights, property, or safety of Brite, our Customers, users, or others;
investigate fraud or security incidents.

D. Business Transactions

If Brite is involved in a merger, acquisition, financing, asset sale, corporate reorganization, or similar transaction, Personal Information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

E. Consent

Where appropriate, Brite may disclose information with the consent or direction of the applicable Customer or individual, as required by law.

17. Third-Party Artificial Intelligence Services

Certain educational content available through the Services may incorporate independent third-party artificial intelligence (“AI”) services.

Depending on the educational content, these services may include large language models, code generation tools, image generation tools, audio generation tools, design platforms, video creation tools, research tools, and other AI-powered technologies.

Examples of providers currently used in educational content delivered through the Services may include OpenAI, Anthropic, Microsoft, Cursor, Adobe, Canva, ElevenLabs, Suno, Recraft, WebSim, GenSpark, and other providers selected by Brite, the applicable Content Provider, or the Customer from time to time. The specific providers incorporated into educational content may change as technologies evolve.

Each provider maintains its own Terms of Service, Privacy Policy, Acceptable Use Policy, Community Guidelines, and eligibility requirements.

Brite does not own or control these third-party AI services and does not assume responsibility for their privacy practices, security practices, availability, pricing, content moderation decisions, or changes to their policies.

Customers are responsible for determining which third-party AI services are appropriate for their educational environment and for ensuring that their instructors and students comply with the applicable terms, policies, and eligibility requirements of those services.

The inclusion of any third-party AI service within educational content delivered through the Services does not constitute an endorsement, certification, or warranty of that service by Brite.

Customers should independently evaluate third-party AI services before making them available to students.

18. Student Information

Student Information receives additional protections beyond those generally applicable to other Personal Information.

Brite processes Student Information solely for educational purposes authorized by the Customer.

Unless specifically authorized by the Customer or required by law, Brite does not:

sell Student Personal Information;
rent Student Personal Information;
use Student Personal Information for targeted advertising;
build commercial marketing profiles of students;
disclose Student Information except as described in this Privacy Policy.

Student Information remains under the direction and control of the Customer.

19. Children’s Privacy (COPPA)

Brite is designed for use by educational organizations, tutoring centers, schools, franchises, and businesses that provide educational services, including services to children under the age of thirteen (13).

Brite does not provide accounts directly to children.

Student accounts are created and managed by authorized Customers.

When Student Information relating to children under thirteen is processed through the Services, Brite does so solely as a service provider on behalf of the applicable Customer.

Customers are responsible for ensuring they possess the legal authority to provide Student Information to Brite and for obtaining any parental consent, school authorization, or other permissions required under applicable law, including the Children’s Online Privacy Protection Act (“COPPA”).

Brite collects only the information reasonably necessary to provide the Services requested by the Customer.

Brite does not knowingly use Personal Information collected from children:

for behavioral advertising;
for commercial profiling;
for unrelated marketing purposes;
for sale to third parties.

If Brite becomes aware that Personal Information has been submitted directly by a child outside the context of an authorized Customer account, Brite will take reasonable steps to investigate and, where appropriate, delete such information.

Parents or legal guardians who believe a child has provided information directly to Brite outside an authorized educational account may contact us using the contact information provided at the end of this Privacy Policy.

20. Customer Responsibilities Regarding Student Information

Customers determine:

which students receive accounts;
what information is uploaded;
how long student records should be retained;
when student accounts should be deactivated;
who within their organization may access Student Information.

Customers are responsible for ensuring that they have the legal authority to provide Student Information to Brite and for complying with applicable privacy and education laws governing their relationship with students and families.

Nothing in this Privacy Policy relieves Customers of their independent legal obligations under applicable law.

21. Family Educational Rights and Privacy Act (FERPA)

Where applicable, Brite supports Customers that are subject to the U.S. Family Educational Rights and Privacy Act (“FERPA”).

When providing Services to educational institutions subject to FERPA, Brite generally acts as a “school official” or service provider performing institutional services or functions on behalf of the educational institution, as permitted by FERPA and applicable regulations.

Brite processes education records solely for the purpose of providing the Services requested by the educational institution and only in accordance with the institution’s instructions and applicable agreements.

Educational institutions remain responsible for:

determining whether FERPA applies to their use of the Services;
providing any required notices to parents or eligible students;
determining who may access education records;
responding to requests to inspect or amend education records; and
complying with their obligations under FERPA and other applicable education laws.

Brite does not independently determine how Customer education records are used and does not disclose education records except as authorized by the Customer, required by law, or otherwise described in this Privacy Policy.

22. International Privacy Laws

Brite serves Customers located in multiple countries and strives to process Personal Information in accordance with applicable privacy laws where those laws apply.

Because Brite generally processes Student Information on behalf of educational organizations and businesses, Brite will typically act as a Data Processor, Service Provider, or equivalent role under applicable privacy laws, while the Customer acts as the organization responsible for determining the purposes and means of processing Personal Information.

22.1 European Union General Data Protection Regulation (GDPR)

Where the General Data Protection Regulation (EU) 2016/679 (“GDPR”) applies, Brite generally processes Personal Data on behalf of its Customers acting as Data Controllers.

Brite processes Personal Data only:

in accordance with Customer instructions;
as necessary to provide the Services;
to comply with legal obligations;
to protect the security and integrity of the Services; or
as otherwise permitted by applicable law.

Where required by law, Brite will implement appropriate technical and organizational measures designed to protect Personal Data.

Individuals located within the European Economic Area may have rights under applicable law, including rights to:

access Personal Data;
correct inaccurate Personal Data;
request deletion of Personal Data;
request restriction of processing;
object to certain processing activities;
request data portability where applicable.

Because Brite generally processes Student Information on behalf of Customers, requests relating to Student Information should ordinarily be directed to the applicable Customer.

22.2 United Kingdom GDPR

Where the UK GDPR applies, Brite processes Personal Data in a manner substantially consistent with the principles described above.

Customers located within the United Kingdom remain responsible for determining the lawful basis for processing Personal Data collected through their use of the Services.

22.3 Australia

Brite supports Customers located in Australia.

Where applicable, Brite endeavors to handle Personal Information in a manner consistent with the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (“APPs”).

Australian Customers remain responsible for ensuring they have the legal authority to provide Personal Information to Brite and for complying with applicable Australian privacy laws governing their organizations.

22.4 New Zealand

Brite supports Customers located in New Zealand.

Where applicable, Brite endeavors to process Personal Information in a manner consistent with the New Zealand Privacy Act 2020.

New Zealand Customers remain responsible for ensuring they have the legal authority to disclose Personal Information to Brite for processing through the Services.

23. California Privacy Rights

Where applicable, California residents may possess certain privacy rights under the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).

Subject to applicable exemptions, California residents may have rights to:

know the categories of Personal Information collected;
request access to Personal Information;
request deletion of Personal Information;
request correction of inaccurate Personal Information;
receive information regarding disclosures of Personal Information;
exercise rights without unlawful discrimination.

Brite does not sell Personal Information as those terms are generally defined under the CCPA.

Brite does not knowingly sell or share Student Personal Information for cross-context behavioral advertising.

Many Student Information records processed by Brite are subject to statutory exemptions under California law. Requests relating to Student Information should generally be directed to the Customer that controls the applicable educational records.

24. International Data Transfers

Because Brite and certain service providers may operate in multiple jurisdictions, Personal Information may be transferred to and processed in countries other than the country in which it was originally collected.

Where required by applicable law, Brite will take reasonable steps to ensure that appropriate safeguards are implemented for such transfers.

By using the Services, Customers acknowledge that Personal Information may be processed in jurisdictions in which Brite or its service providers operate, subject to applicable legal protections.

25. Security

Protecting Personal Information is a core component of Brite’s Services.

Brite maintains commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, destruction, or misuse.

These safeguards may include measures such as:

role-based access controls;
authentication procedures;
encryption of data in transit using industry-standard protocols;
secure cloud infrastructure;
network monitoring;
logging and auditing;
regular software updates;
backup and disaster recovery procedures;
employee access controls;
security awareness practices.

No method of transmitting information over the Internet or storing electronic information can be guaranteed to be completely secure.

Accordingly, while Brite works diligently to protect Personal Information, Brite cannot guarantee absolute security.

26. Data Retention

Brite retains Personal Information only for as long as reasonably necessary to:

provide the Services;
fulfill contractual obligations;
comply with legal obligations;
resolve disputes;
enforce agreements;
maintain appropriate business records;
protect the security and integrity of the Services.

Because Customers control Student accounts, Student Information is generally retained until:

the Customer deletes the information;
the Customer terminates the applicable account; or
Brite deletes the information in accordance with applicable agreements and retention practices.

Customers are responsible for determining the retention periods appropriate for Student Information maintained through the Services.

27. Individual Privacy Rights

Depending upon applicable law, individuals may possess rights regarding their Personal Information, including the right to:

access Personal Information;
request correction of inaccurate Personal Information;
request deletion of Personal Information;
object to certain processing activities;
request restriction of processing;
request data portability where applicable;
withdraw consent where processing is based upon consent.

Because Brite generally processes Student Information on behalf of Customers, requests concerning Student Information should ordinarily be directed to the applicable Customer.

Where Brite receives a request relating to Student Information that is controlled by a Customer, Brite may refer the request to that Customer or otherwise respond in accordance with applicable agreements and law.

28. Customer Responsibilities

Customers are responsible for:

determining whether the Services are appropriate for their organization;
ensuring they possess the legal authority to provide Personal Information to Brite;
obtaining any required parental consents, school authorizations, or other permissions;
determining appropriate user permissions;
maintaining the confidentiality of administrator credentials;
promptly notifying Brite of suspected unauthorized access;
complying with applicable privacy, education, employment, and consumer protection laws.

Customers remain responsible for the accuracy of information they upload to the Services.

29. Third-Party Websites and Integrations

The Services may contain links to third-party websites, software, applications, educational content, or services, including resources referenced by Content Providers or Customers.

Brite does not control and is not responsible for the privacy practices, security practices, content, or availability of those third-party resources.

Customers are encouraged to review the privacy policies of any third-party services they choose to use in connection with the Services.

30. Changes to this Privacy Policy

Brite may modify this Privacy Policy from time to time.

When material changes are made, Brite will update the Effective Date appearing at the beginning of this Privacy Policy.

Where required by applicable law or contractual obligation, Brite may provide additional notice of material changes.

Continued use of the Services following the effective date of an updated Privacy Policy constitutes acceptance of the revised Privacy Policy to the extent permitted by applicable law.

31. Contact Information

Questions regarding this Privacy Policy or Brite’s privacy practices may be directed to:

Brite

Website: https://www.gobrite.io

Email: support@gobrite.io

Address: Brite 4400 N Scottsdale Rd, Ste 9302 Scottsdale AZ 85251

If you are contacting Brite regarding Student Information maintained on behalf of a school, tutoring center, or other Customer, please identify the applicable Customer in your request so that we may respond appropriately.

32. Relationship to Other Agreements

This Privacy Policy should be read together with the Brite Terms & Conditions, applicable Service Orders, and, where applicable, any Data Processing Addendum (“DPA”) or other written agreement between Brite and the Customer.

In the event of a conflict between this Privacy Policy and an executed written agreement governing the Services, the terms of the executed written agreement shall control solely to the extent of the conflict.

Effective Date: August 6, 2026 Last Updated: August 6, 2026