About this policy
Credit Bright Solutions Inc. ("Credit Bright," "we," "us," or "our") operates the website at creditbright.com and related applications. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under Canadian privacy law.
This policy applies to all users of our website, courses, tools, and services. By creating an account or using Credit Bright, you acknowledge that you have read and understood this policy.
Credit Bright Solutions Inc. is a federal corporation incorporated under the Canada Business Corporations Act, registered in British Columbia.
The law that governs this policy
This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). Where applicable, we also comply with Quebec's Act respecting the protection of personal information in the private sector (Law 25) for residents of Quebec, and with Canada's Anti-Spam Legislation (CASL) with respect to electronic communications.
What we collect
Account information. When you create an account, we collect your full name, email address, and a password. This information is stored securely in our database, hosted by Supabase.
Payment information. When you purchase a course or bundle, your payment is processed by Stripe. Credit Bright does not store your credit card number, bank account details, or other payment credentials. Stripe processes and stores this information in accordance with PCI DSS standards. We receive a transaction record from Stripe confirming your purchase, including the amount, date, and product purchased.
Course and assessment data. As you work through Credit Bright courses and tools, we collect data about your activity and performance. This includes pre-assessment and post-assessment scores, responses to in-course activities and exercises, sections completed and completion timestamps, time spent on each section, Credit Calculator inputs and outputs, Credit Simulator actions and results, and certificate issuance records.
AI Advisor usage data. When you use the Credit Bright AI Advisor, your questions are sent to a third-party AI service (Anthropic) for processing. We record metadata about your usage: the number of questions asked, session timestamps, and session duration. We do not store the content of your questions or the responses you receive. Your conversations with the AI Advisor are not retained by Credit Bright after the session ends.
Contact form submissions. If you submit a message through our contact form, we collect your name, email address, the category you select, and the content of your message.
Website analytics. We may use analytics services to understand how visitors use our website. This may include pages visited, time on site, referring source, browser type, and device information. Where third-party analytics tools are used, data may be processed in accordance with those providers' privacy policies. We do not use analytics data to identify individual visitors.
Why we collect it
We collect personal information for the following purposes: to create and manage your account, to process payments and grant access to purchased courses and tools, to track your learning progress and issue certificates, to generate performance reports for you and, where applicable, for your sponsoring organization, to respond to your inquiries and provide support, to improve our courses, tools, and services, and to comply with legal obligations.
Organizational accounts
If your access to Credit Bright is provided through your employer or another organization, we may share your course and assessment data with that organization. This includes enrollment status, completion rates, assessment scores, time spent, and certificate status. This data is used to measure the effectiveness of the program and to generate aggregate reports. We do not share the content of AI Advisor conversations with sponsoring organizations. We share only metadata: the number of queries and session duration.
Who we share information with
Supabase. Our database provider. Stores account information, course progress, and assessment data.
Stripe. Our payment processor. Processes payment transactions. Credit Bright does not have access to your full payment credentials.
Anthropic. The provider of the AI technology that powers the Credit Bright AI Advisor. When you use the AI Advisor, your question is sent to Anthropic's API for processing. Credit Bright uses Anthropic's API in a configuration where user inputs are not used to train AI models.
Netlify. Our website hosting provider. Serves the Credit Bright website. Netlify may collect standard server logs including IP addresses.
We do not sell your personal information. We do not share your personal information with advertisers. We do not use your information for purposes unrelated to Credit Bright's services.
Data storage and security
Your personal information is stored on secure servers operated by our service providers. We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication, and access controls. While no system is completely secure, we take reasonable steps to protect your information from unauthorized access, disclosure, alteration, or destruction.
Data retention
We retain your account information and course data for as long as your account is active. If you request deletion of your account, we will delete your personal information within 30 days, except where we are required to retain it by law. Payment transaction records are retained as required for tax and accounting purposes.
Your rights
Under PIPEDA, and where applicable under Quebec's Law 25, you have the right to know what personal information we hold about you, request access to your personal information, request correction of inaccurate information, request deletion of your personal information, and withdraw your consent to the collection or use of your information.
To exercise any of these rights, contact us at privacy@creditbright.com. We will respond within 30 days.
Rights for Quebec residents
If you reside in Quebec, you have additional rights under Law 25, including the right to data portability and the right to be informed of any automated decision-making that may affect you. Credit Bright does not use automated decision-making that produces legal or significant effects on individuals. To exercise your rights, contact privacy@creditbright.com.
Electronic communications and CASL
Credit Bright complies with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages if you have provided your express consent. You may provide consent during account creation or at other points where we clearly request it.
Transactional messages related to your account, such as purchase confirmations, password resets, and course access notifications, do not require consent under CASL and will be sent as necessary to operate your account.
Every commercial message from Credit Bright will identify Credit Bright Solutions Inc. as the sender, include our contact information, and contain a working unsubscribe mechanism. If you unsubscribe, we will process your request within 10 business days as required by CASL.
Cookies and similar technologies
Credit Bright uses cookies only as necessary to operate our services. This includes session cookies for authentication and functional cookies required for the operation of our courses and tools. We do not use advertising cookies or cross-site tracking cookies. If we introduce analytics cookies in the future, we will update this policy and obtain consent where required.
Children and minors
Credit Bright is designed for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has created an account, please contact us at privacy@creditbright.com and we will promptly delete the account and associated information.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will notify you by email or by a prominent notice on our website before the changes take effect.
Contact us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or wish to file a complaint, contact our Privacy Officer:
Credit Bright Solutions Inc.
Email: privacy@creditbright.com
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca. Quebec residents may also file a complaint with the Commission d'acces a l'information du Quebec.