Privacy Policy
This policy explains what personal data Brightstage collects, why, who it is shared with, how long it is kept, and how you can have it deleted. Brightstage is operated by PEAKSERVE GLOBAL PRIVATE LIMITED (trading as “PeakServes”), CIN U70200DL2023PTC414058, with its registered office at 2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035 (“we”, “us”). We act as the data fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDPA”). The privacy policy for the PeakServes website itself is here.
1. Who this applies to
- Connected account holders: people who connect an Instagram professional account to Brightstage (our own team and creators we work with).
- Creators: people we invite to make content for us, who receive briefs, upload videos and are messaged on WhatsApp.
- People who interact with connected accounts: for example, people who comment on or send direct messages to a connected Instagram account.
2. What we collect
| Data | Source | Why we use it |
|---|---|---|
| Instagram account ID, username, name, profile picture, account type | Instagram API, when you connect your account | To identify the connected account and show it in Brightstage |
| Access tokens | Instagram API | To act on the account with your permission. Stored encrypted. |
| Posts, captions, media and their metrics (views, reach, likes, comments, shares, saves) | Instagram API | To publish scheduled content, confirm that a post went live, and report performance |
| Comments and direct messages on connected accounts, and the commenter's or sender's Instagram ID and username | Instagram API | To show them in our inbox, reply, and moderate (hide or delete) where you have allowed it |
| Creator name, phone number (WhatsApp), email, and the videos, captions and notes you upload | You, through our creator portal or WhatsApp | To send briefs and reminders, receive and review your content, and record what was agreed and posted |
| WhatsApp messages exchanged with us | WhatsApp Business Platform | To coordinate assignments with creators |
| Payment details, if we pay you | You | To pay creators |
| Technical logs (IP address, request times, errors) | Our servers | Security and troubleshooting |
3. AI assistance
We use AI tools to draft captions and suggested replies to comments and messages. The text of a comment or message may be sent to our AI provider to produce a draft. Drafts are reviewed according to each account's settings. Accounts that post AI-generated personas are disclosed as such on their profile.
4. Who we share data with
Only with service providers that run Brightstage for us, under their own terms and data protection commitments:
- Meta Platforms (Instagram API, WhatsApp Business Platform), to publish, read and send on connected accounts.
- Cloudflare (storage of media files).
- Hetzner Online (application servers and database, Singapore region).
- Anthropic (AI drafting, as described above).
Some of these providers process data outside India. We may disclose data if required by law.
5. How long we keep it
- Access tokens: until you disconnect the account or revoke access.
- Media prepared for publishing: deleted from public storage within 30 days.
- Comments, messages, metrics and assignment records: for as long as the account or creator relationship is active, then deleted within 90 days, unless we must keep them longer for legal, tax or payment reasons.
- Technical logs: up to 30 days.
6. Security
Tokens are encrypted at rest, creator uploads are kept in private storage, access to the admin tools is restricted to authorised team members, and all traffic uses HTTPS.
7. Your rights
You can ask us to access, correct or delete your personal data, withdraw consent, or nominate someone to exercise these rights for you, as provided by the DPDPA and other applicable law. See how to delete your data, or write to info@peakserves.com. We reply within 30 days.
8. Children
Brightstage is not intended for anyone under 18, and we do not knowingly collect their data.
9. Changes
We will post any change to this policy on this page with a new effective date.
10. Contact and grievances
PEAKSERVE GLOBAL PRIVATE LIMITED, 2639/197, Onkar Nagar, Tri Nagar, Delhi, North West Delhi, India - 110035. Email: info@peakserves.com.
Grievance Officer (DPDPA): write to info@peakserves.com with the subject “Grievance – Brightstage”. We acknowledge within 7 days and resolve within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.