Incorporated in Delaware. 221 River St, Hoboken, NJ 07030. United States only.
brightplace inc ("brightplace," "we," "us," or "our") is a Delaware corporation with its principal place of business at 221 River St, Hoboken, NJ 07030. We operate brightplace.ai and the IntentOS platform, an AI-native apartment search and discovery service available to renters across the United States.
This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices you have. It applies to all brightplace products and services, including our consumer search experience, the Listings Source API, and the Intent Data Console. Because we serve renters nationally, Section 11 addresses the specific privacy rights available under state comprehensive consumer privacy laws.
We believe renters deserve transparency. We built this policy to be readable, not just legally sufficient.
01Definitions
Personal information
When we use the term "personal information" in this policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual or household. It does not include de-identified or aggregate information that is maintained in a form that cannot reasonably be associated with or linked to an individual.
Sensitive personal information
A subset of personal information subject to heightened protections under applicable law. As used in this policy, sensitive personal information includes: precise geolocation data; financial account details; health or medical data; racial or ethnic origin; religious beliefs; contents of private communications; biometric data used for unique identification; and personal information of known minors. See Section 8 for how we handle sensitive personal information.
Intent data
Structured indicators generated when a renter interacts with brightplace search, including search queries, conversational prompts, filter selections, properties engaged with, and session behavior. This is brightplace's core data asset and is described in detail in Section 5.
02Scope and United States Only
When we determine that a user is accessing brightplace from outside the United States, we will delete that user's personal information from our active systems.
If you continue to access the Service from outside the United States without authorization, any personal information collected will be transferred to, stored, and processed in the United States. Your continued use in those circumstances constitutes consent to such transfer and processing, which may occur under data protection rules that differ from those of your country of residence.
This policy applies to all brightplace products and services, including the consumer search experience on brightplace.ai, the Listings Source API, operator-embedded deployments, and the Intent Data Console. It does not cover the privacy practices of apartment operators or other third parties whose products or services may be accessed through brightplace.
03User Consents and Communications
Account and transactional communications
By creating an account, you consent to us sending transactional messages by email and, where you provide a phone number, by SMS/text message. Transactional messages include account verification, password reset, saved-search alerts, and session notifications. Consent to transactional communications is not a condition of purchase or use of the search service. You may opt out of non-essential communications at any time.
Operator contact consent (TCPA notice)
When you voluntarily submit an inquiry, tour request, or application to an apartment operator through brightplace, you give that operator your express written consent to contact you about your inquiry, including by calling and texting you via automated means, pre-recorded or artificial voice messages, and text messages, even if your phone number is on a do-not-call registry. This consent is provided directly to the operator and is governed by that operator's own privacy policy. Consent is not a condition of using brightplace or viewing listings.
Opting out of communications from brightplace
To stop receiving SMS messages from brightplace, reply STOP to any text message we send. To resume, reply START or contact support@brightplace.ai. To opt out of marketing emails, click the unsubscribe link in any marketing email or email privacy@brightplace.ai. Message and data rates may apply.
AI-powered search disclosure
The brightplace search experience is powered by artificial intelligence. When you interact with brightplace search, you are interacting with an AI system, not a human agent.
04Information We Collect
Information you give us directly
When you create an account or use brightplace, you may provide your name, email address, and authentication credentials (via Google or other SSO providers). You are never required to create an account to use search.
Search and intent data
When you search on brightplace, whether on brightplace.ai or on a property operator's website powered by brightplace, we collect your search queries, filter selections, conversational prompts, and the results you interact with. This is the core of what we call intent data: structured indicators about what you are looking for in an apartment.
- Search queries and conversational prompts
- Filter selections and expressed preferences
- Properties viewed and shortlists created
- Follow-up prompts and session duration
Behavioral and usage data
We collect information about how you interact with brightplace: pages visited, clicks, scroll depth, time spent, drop-off points, and device and browser type. This data drives product improvements and powers our attribution model.
Location data
We infer your approximate location from your IP address to localize search results. If you use proximity-based search features, we may request access to your precise geolocation. Precise geolocation is classified as sensitive personal information under several state laws. We will request your explicit consent before collecting precise location from your device, and you may decline at any time without losing access to core search functionality.
Data from connected accounts
If you log in via Google SSO, we receive your name, email address, and profile photo from Google. We do not access your Gmail, calendar, or any other Google product data.
Data received from operators and third parties
Apartment operators who use brightplace's services may provide us with data about renters and prospective renters in connection with their use of our platform, including contact information and move-in data. If we receive data about an individual who has not used our Service, we delete that individual's information. We may also receive information from analytics providers, data enrichment vendors, and Property Management Systems (PMS) that integrate with our platform.
Combining information
We may combine data we collect through the Service with data received from third parties or linked to a particular device. If we combine such data with personal information, the combined dataset will be treated as personal information for as long as it remains combined.
05Intent Data and Operators
When you search for apartments, on brightplace.ai or on an operator's website powered by brightplace, the queries and behavioral data generated during that session constitute intent data. We aggregate and structure this data and make it available to the apartment operators whose properties you engaged with, through our Intent Data Console and Conversion Intel API.
Where brightplace is deployed on an operator's own website, that operator may have their own privacy policy. brightplace's data practices under this policy apply to all data processed through our platform regardless of deployment context.
You can opt out of having your session data included in operator-facing intent data reports by adjusting your privacy preferences in account settings or submitting a request to privacy@brightplace.ai.
06How We Use Your Data
To power personalized search
Your search history and expressed preferences enable us to surface apartment listings that are genuinely relevant to your situation. Context you provide in one session may be used to personalize future sessions if you are a logged-in user.
To improve the product
Aggregate behavioral data tells us what is working and what is not. We use it to improve search quality, conversation design, and the overall renter experience. We do not sell insights derived from this analysis in a form that identifies individual users.
To support operator relationships
We provide apartment operators with structured intent data about how renters are engaging with their properties. See Section 5 for a full explanation.
To communicate with you
If you create an account, we may email or text you about saved searches, session history, or product updates. You can unsubscribe at any time. We do not send marketing communications to users who have not opted in.
To comply with legal obligations
We retain and process data as required by applicable law, including fraud prevention, Fair Housing compliance logging, and regulatory record-keeping.
In connection with a business combination
We may use your information as part of evaluating or executing a merger, acquisition, debt financing, or sale of company assets, as well as in the event of insolvency, bankruptcy, or receivership.
07Data Sharing
We do not sell your personal information. We share data only in the following circumstances:
With apartment operators (Section 5)
Structured, aggregated intent data is shared with operators whose properties you engaged with, as described in Section 5.
With service providers
We work with third-party vendors who help us operate brightplace, including cloud infrastructure, analytics, and authentication providers. These vendors process data on our behalf under contracts that restrict their use of your information to the purposes for which it was shared.
With AI and LLM platforms via API
Our Listings Source API may be accessed by AI agents and LLM applications that retrieve apartment listings on behalf of users. When brightplace responds to an API call, we receive attribution data about the source of the query. We do not receive personally identifying information about the end user from these platforms.
With third-party marketing providers
We may share contact information (excluding text-messaging opt-in data and consent records) with third-party organizations for use in marketing products or services that may interest you, such as moving services or renters' insurance. You may opt out by contacting privacy@brightplace.ai.
For legal or safety reasons
We may disclose information if required by law, subpoena, or court order, or if necessary to protect the safety or rights of brightplace, our users, or the public.
In connection with a business transaction
If brightplace is acquired, merged, or undergoes a change in control, user data may be transferred as part of that transaction. We will notify affected users at least 30 days in advance and provide the opportunity to delete your account before any transfer.
08Sensitive Personal Information
Precise geolocation
Precise geolocation data (your real-time GPS or network-derived location accurate to within a small radius) is classified as sensitive personal information under California (CPRA), Colorado (CPA), Connecticut (CTDPA), and several other state laws. We will request your explicit consent through your device's operating system permissions dialog before collecting precise geolocation. You may withdraw this consent at any time through your device settings. Declining precise location access does not prevent you from using brightplace search; we will fall back to IP-based location inference.
Other sensitive categories
Our Services are not designed to collect financial account details, health or medical data, racial or ethnic origin, religious beliefs, biometric data, or contents of private communications. Please do not voluntarily submit such information. If you do provide sensitive information, we will treat it with heightened protection and will not use it for advertising, profiling, or sharing with third parties without your explicit consent.
Right to limit sensitive data processing
If you are a resident of California, Colorado, Connecticut, Texas, Virginia, or another state whose law recognizes a right to limit the use of sensitive personal information, you may submit a limit request by emailing privacy@brightplace.ai with the subject line "Sensitive Data Limit Request." We will process your request within 45 days.
09Cookies and Tracking
Essential cookies
Required for the platform to function, including session management, authentication state, and API request authentication. These cannot be disabled without breaking core functionality.
Analytics cookies
We use behavioral analytics tools (including Google Analytics, for which we have enabled restricted data processing) to understand how renters use brightplace. This data is used exclusively for product improvement and is not shared with advertisers.
Attribution tracking
A core function of brightplace is connecting renter intent to outcomes (applications submitted, leases signed). We track the source of traffic arriving at brightplace and the destination of traffic leaving it. This attribution data is the foundation of how we demonstrate value to operators.
Pixel tags and web beacons
We and our service providers may use pixel tags, web beacons, and similar tracking technologies to analyze usage patterns. These technologies may drop cookies on your device.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using brightplace search. Residents of states with opt-out rights for targeted advertising may exercise those rights as described in Section 11.
10Data Retention
We retain personal data for as long as your account is active or as long as necessary to provide our services. The table below sets out our standard retention periods.
| Data type | Retention period |
|---|---|
| Account data (name, email) | Until deletion + 30 days |
| Search and session data (logged-in) | 27 months from collection |
| Anonymous session data (aggregate) | Indefinite, de-identified |
| Intent data shared with operators | 27 months from collection |
| Attribution and outcome data | 51 months from collection |
| Listings and supply data | Indefinite, de-identified |
| Sensitive data (precise geolocation) | Session only |
| Legal compliance records | 7 years and 15 days |
| Deletion requests and responses | 3 years and 15 days |
Following account deletion, we may retain certain data for legal compliance purposes within the periods above, after which it is permanently purged from all systems.
11Your Rights by State
brightplace.ai is accessible to renters in all 50 states. The rights available to you depend in part on where you reside. The following rights apply to all users nationally.
Rights available to all users
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct inaccurate personal information
- Deletion: request deletion of your account and personal information
- Opt-out: opt out of intent data sharing with operators
- Portability: request your data in a portable, machine-readable format
- Restriction: ask us to limit how we process your personal information
We will respond to all verifiable data rights requests within 45 days. If we need additional time, we will notify you within the initial 45-day period and may extend our response by an additional 45 days where permitted by applicable law.
State-specific rights
The following 16 states have enacted comprehensive consumer privacy laws that provide residents with additional or specifically enumerated rights:
| State | Law | Key additional rights |
|---|---|---|
| California | CCPA/CPRA | Right to know categories and specific pieces of data; right to opt out of sale or sharing; right to limit use of sensitive personal information; right to non-discrimination; Shine the Light rights |
| Colorado | CPA | Right to opt out of profiling for decisions with legal or significant effects; right to appeal a denied request |
| Connecticut | CTDPA | Right to opt out of sale and targeted advertising; right to appeal a denied request |
| Delaware | DPDPA | Right to opt out of targeted advertising, sale, and profiling; right to appeal; applies to controllers of 35,000+ consumers |
| Iowa | ICDPA | Right to opt out of sale and targeted advertising; right to deletion of account data |
| Maryland | MODPA | Right to opt out of targeted advertising and sale; prohibition on use of sensitive data for targeting; effective October 1, 2025 |
| Minnesota | MHPCA | Right to opt out of targeted advertising, sale, and profiling; right to question automated decisions; effective July 31, 2025 |
| Montana | MCDPA | Right to opt out of targeted advertising, sale, and profiling; right to appeal a denied request |
| Nebraska | NDPA | Right to opt out of targeted advertising, sale, and profiling; right to appeal a denied request |
| New Hampshire | NHDPA | Right to opt out of targeted advertising, sale, and profiling; right to appeal a denied request |
| New Jersey | NJDPA | Right to opt out of targeted advertising, sale, and profiling; right to appeal (brightplace's home state) |
| Oregon | OCPA | Right to opt out of sale; right to obtain list of specific third parties to whom data has been disclosed |
| Tennessee | TIPA | Right to opt out of sale, targeted advertising, and profiling; right to appeal; effective July 1, 2025 |
| Texas | TDPSA | Right to opt out of sale and targeted advertising; right to limit sensitive data processing; right to appeal |
| Utah | UCPA | Right to opt out of sale and targeted advertising; right to deletion of account data |
| Virginia | VCDPA | Right to opt out of targeted advertising and profiling; right to appeal a denied request |
Fair Housing
brightplace operates in compliance with the Fair Housing Act. We do not use protected characteristics (race, color, national origin, religion, sex, familial status, or disability) to personalize or restrict search results. Our search personalization is based solely on preferences expressed by the renter.
How to submit a rights request
To exercise any of the rights described in this section, email privacy@brightplace.ai with the subject line "Privacy Rights Request" and your state of residence. We will verify your identity before processing the request and respond within 45 days.
12Minimum Age
Users under 18 are not permitted to use brightplace. If we learn that we have collected personal information from a person under 18, we will delete that information from our active systems within 15 days of discovery. If you believe we may have collected information from a user under 18, please contact us immediately at privacy@brightplace.ai with the subject line "Under-18 Report."
Any use of the Service by a person under 18 is unauthorized and in violation of our Terms of Use. We do not knowingly collect, maintain, or use personal information from users under 18 for any purpose.
13Security
We apply industry-standard security practices to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. We maintain a data governance policy covering what we collect, how it is stored, who can access it, and how long it is retained.
No system is perfectly secure. If you discover a security vulnerability in brightplace, please report it responsibly to security@brightplace.ai.
In the event of a data breach that triggers notification obligations under applicable state law, we will notify affected users within the time period required by the law of their state of residence. We will comply with the strictest applicable standard and aim to notify within 30 days of confirmed discovery in all cases.
14Contact and Legal Notices
| Privacy requests | privacy@brightplace.ai |
| Security | security@brightplace.ai |
| Legal notices | legal@brightplace.ai |
| Company | brightplace inc (Delaware corporation) |
| Website | brightplace.ai |
| Legal address | 221 River St, Hoboken, NJ 07030 | Attn: Legal |
Policy updates
We may update this policy as our product and legal obligations evolve. When we make material changes, we will notify logged-in users by email at least 15 days before the changes take effect and update the effective date above. Continued use of brightplace after the notice period constitutes acceptance of the updated policy.