Privacy Policy
Last updated: 1 April 2026 | Brightstate.ai, Scotland
Who We Are
Brightstate.ai is a B2B AI procurement intelligence platform serving UK housing authorities and public sector organisations. We are registered in Scotland.
Data controller contact: data@brightstate.ai
ICO registration is currently in progress. Our registration number will be published here upon confirmation.
What Data We Collect
Contact and enquiry data
- Name and email address submitted via contact or demo request forms
- Organisation name and job title where provided voluntarily
Technical data
- IP addresses and browser session logs (collected automatically)
- Pages visited and time on site
Procurement inputs
- Where users interact with our AI analysis tools, procurement documents are processed in pseudonymised form only — organisation-identifying information is removed before any AI processing occurs
- We do not store these inputs long-term
Why We Collect It and Our Lawful Basis
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries and demos | Legitimate interests |
| Improving platform performance | Legitimate interests |
| Processing pseudonymised procurement inputs | Legitimate interests |
| Marketing communications (if opted in) | Consent |
We do not use your data to train AI models. Your data is never sold or shared with third parties for their own commercial purposes.
How Long We Keep It
- Contact form data: 6 months from submission
- Server and access logs: 26 months, in line with standard security practice
- Pseudonymised procurement inputs: Not retained beyond the active session unless explicitly agreed otherwise in a contract
Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (where no legal obligation requires us to keep it)
- Object to processing based on legitimate interests
- Restrict processing in certain circumstances
- Portability of data you have provided to us
To exercise any of these rights, contact us at data@brightstate.ai. We will respond within 30 days.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to This Policy
We will update this page when our practices change. Significant changes will be flagged on the site. The date at the top of this page always reflects the most recent version.