Your privacy.
Your choices.

Who is responsible

BrightGate (برايت غيت) is the trading brand of Company Bright Gate, shown in English on our address proof as Company Bright Gate. We are responsible for the personal data collected through this website and its enquiry services.

Privacy and enquiry contact: info@brightgate.com.sa.

What we collect and why

• Chat: the messages you choose to send, AI and team replies, a conversation identifier, timestamps and your consent choices. We use these to answer BrightGate service questions and coordinate your enquiry.
• Enquiry details: name, company, mobile number, email and a short request. These support project scoping, routing and follow-up by the BrightGate team.
• Technical records: essential session information, a protected chat access token, security/rate-limit records and hosting access logs, which may include IP address and browser/request information. These support website delivery and abuse prevention.

Do not send passwords, payment-card or bank details, identity documents, health information or other sensitive or confidential material in chat. Use a separately agreed secure channel when a project requires protected information.

Your choices before starting

Chat starts only after you choose “Agree & start chat”. The notice explains the selected staff channel and links to this policy. We record the notice version, channel and time. Chat participation is optional.

After two AI replies, or before a team handover, the chat requires your name, company, mobile, email and request, together with a separate agreement to enquiry follow-up. Without these details, further chat messages and handover are unavailable. You can still browse our services or contact info@brightgate.com.sa directly.

We rely on your consent for optional chat sharing and enquiry follow-up. Where another legal basis is needed for a requested contract, security or a legal obligation, processing is limited to that purpose under applicable law. Enquiry consent is not permission for unrelated marketing.

Who receives your information

• BrightGate’s authorised team can see website conversations in the private staff inbox. When you submit enquiry details, those details and the conversation so far are queued for email to info@brightgate.com.sa.
• OpenAI processes chat messages and recent conversation context to generate AI replies. Contact-form fields are excluded from the AI request, but details you type directly into chat messages are part of the conversation context.
• Google, only if you allow Google Ads measurement, processes advertising measurement data as described under browser storage. Enquiry fields and chat messages are not included in our conversion events.
• GoDaddy and supporting hosting/email providers process information needed to operate the website and deliver enquiry emails.
• Meta/WhatsApp, if activated: the notice will explicitly say that chats are shared with our authorised team through WhatsApp. A channel change requires renewed chat agreement. The visitor stays on the website; submitting a mobile number does not automatically enrol the visitor in WhatsApp marketing.

External links and provider services have their own privacy notices. AI providers may retain security records under their own policies. See OpenAI’s API data controls, GoDaddy’s privacy notice and WhatsApp’s privacy notice.

Where processing takes place

The current website hosting is in Europe. AI, email, optional Google Ads measurement and, when enabled, WhatsApp services may process data outside Saudi Arabia, including the United States and other countries used by the providers. This service does not promise Saudi-only storage.

International processing is subject to applicable Saudi data-protection requirements and appropriate provider arrangements. Your chat agreement does not waive your statutory rights or replace any safeguards required by law. Contact us before sharing data that must stay in a specific country.

How long records remain

Website chat messages, associated enquiry details, consent records and pending delivery records are scheduled for deletion after 30 days without activity in that conversation. Closing chat stops new sharing; it does not immediately erase the existing record. Hosting backups and security logs have separate provider-managed lifecycles.

Copies already delivered to email, authorised staff or external providers are not removed by the website’s automatic cleanup. We retain enquiry correspondence only for the enquiry, agreed service, necessary business records or applicable legal requirements. Contact us for review or deletion of those copies. A minimal staff-notification opt-out record may remain to prevent further notifications.

Stop sharing, access or correct your data

Use “Stop sharing & close chat” in the chat panel to withdraw chat sharing and cancel pending follow-up deliveries. Further AI and team replies to that chat are blocked. Already completed processing or delivered copies cannot be recalled by that button.

You may request access, a copy, correction, destruction where applicable, or withdrawal of consent by emailing info@brightgate.com.sa. To stop follow-up from a previously delivered enquiry, include that request in your email. Provide enough context to locate the enquiry; we may proportionately verify that it is yours. Do not email identity documents unless we separately establish a necessary secure verification method.

We assess requests under applicable law and explain any lawful retention requirement or other limitation. You may raise a concern with the competent Saudi data-protection authority; information is available through SDAIA’s data-governance platform.

Browser storage and email forms

The chat uses your browser’s session storage to keep the conversation identifier and access token for that tab. The restricted staff inbox uses an essential sign-in cookie. Hosting services may maintain additional security logs or essential controls.

With your consent, the contact form saves your name, email, optional organisation, selected service and message in BrightGate’s private inbox and queues an email notification to info@brightgate.com.sa. These fields are not sent to an AI provider or WhatsApp, and consent does not subscribe you to marketing. Website inbox records are removed after 30 days of inactivity; follow-up email correspondence is retained as needed to handle your request under the retention section. Email us to request correction or deletion. The form uses a random request identifier to avoid duplicate submissions and rate limits to reduce abuse. The customer checklist keeps selections locally until transferred to the form or the tab closes. If you allow analytics, we measure checklist completion and saved enquiries using fixed labels without form contents.

Optional website analytics. With your permission, BrightGate uses Matomo on its own hosting to measure pages viewed, approximate country or region, browser and device type, referring website domain, brochure downloads, email-link clicks and successfully saved chat enquiries. A click on an email link does not confirm that an email was sent. Analytics starts only after you allow “Website analytics” in the privacy choices; declining does not affect the website or chat.

We mask part of the IP address before storing it and use the masked address for approximate location. We discard arbitrary page query strings and fragments, retaining only predefined campaign, source, medium and post labels from our marketing links, keep only the referring domain, and do not send enquiry form fields, contact details, company names or chat messages to analytics. We do not assign analytics user IDs to customers. Hosting security logs are separate and may retain IP addresses for security.

After consent, first-party analytics cookies can last up to 90 days for a visitor identifier, 30 days for referral information and 30 minutes for a visit session. We remember your allow/decline choice in browser storage for up to 180 days. Use “Privacy choices” in the footer to change it at any time. Withdrawal stops future analytics and clears its cookies; it does not remove previously collected reports. We respect browser Do Not Track and Global Privacy Control signals.

Analytics is processed on BrightGate’s existing hosting in Europe. Raw analytics records are scheduled for deletion after 90 days, and aggregated reports after 13 months. Our private daily website backups retain the seven most recent successful copies, including analytics data; separately retained copies have their own retention. Reports require authorised staff sign-in. We do not sell analytics data or record visitor sessions.

Optional Google Ads measurement. This is a separate choice from Matomo. Google’s tag loads only after you allow “Google Ads measurement”. It helps us understand whether an advert led to a successfully saved website or chat enquiry. We send the completion event, not your name, email, organisation, enquiry text or chat messages. Google may receive advertising click identifiers, cookie identifiers, page and device information and your IP address. Our event configuration removes arbitrary query parameters and fragments, retaining valid Google ad-click identifiers for attribution. Google controls its own tag processing.

We keep personalised advertising and enhanced conversions disabled. Google Ads first-party measurement cookies are configured for up to 30 days; Google may use its own identifiers under its policies. We remember each optional choice for up to 180 days. Existing Matomo consent does not enable Google Ads measurement. You can decline either option, or withdraw it through “Privacy choices”; withdrawal stops our future conversion events, sends a consent update if the tag has loaded and clears Google Ads measurement cookies on this domain. It does not delete reports already collected or cookies held on Google’s domains. Browser Do Not Track and Global Privacy Control disable both optional measurements.

Google may process measurement data outside Saudi Arabia, including the United States. Read how Google uses information from partner sites and Google’s privacy policy. You can use the website and submit an enquiry without allowing advertising measurement.

AI assistance and human support

The chat labels AI replies and distinguishes team replies. AI can make mistakes and does not provide binding quotations, contracts or professional legal advice. Request the team or email us to confirm project requirements. When a team request is unanswered, AI assistance may resume after two minutes. Staff availability is not guaranteed.

Our assistant is for BrightGate services and project enquiries. We do not use this chat as an unrestricted general-purpose AI service or as a means of making decisions that determine a person’s legal rights.

Changes to this notice

This notice was updated on 8 October 2026. We publish changes on this page. A new chat notice version or a change of staff-sharing channel requires renewed agreement before that conversation can continue.