Last updated: September 16, 2026
1. Overview
This Privacy Policy explains how Thesis Music, LLC, a Texas limited liability company doing business as BrightCircle.io ("BrightCircle," "we," "us," or "our"), collects, uses, shares, and protects information you provide when you visit brightcircle.io or any of its subdomains (together, the "Site"), or interact with our forms, diagnostic tools, games, and email communications. It applies to information collected through the Site and through the tools we host on it. It does not cover the data practices of any third party we link to.
For purposes of GDPR and similar laws, BrightCircle acts as the data controller for personal information collected through the Site. By using the Site, you consent to the practices described here.
2. Information We Collect
Information you give us
When you submit a form on the Site, including the Marketing Scorecard diagnostic, the Talk to Us contact form, the contact form in the Black Friday Simulator, or any inquiry, we collect the information you provide. That typically includes:
- First name
- Email address
- Company name
- Website URL (optional)
- Approximate monthly paid media spend (optional)
- Diagnostic answers and resulting scorecard pattern (Marketing Scorecard only)
- Any free-text message or context you send us
Information collected automatically
When you visit the Site, we and our service providers automatically collect certain information about your device and your interaction with the Site, including:
- IP address and approximate geographic location
- Browser type and version, device type, operating system
- Referring URL and pages visited on the Site
- Date and time of visit, time spent on each page
- Aggregate behavioral data (clicks, scrolls, form interactions, and choices made in games and interactive tools)
- UTM parameters and campaign attribution data
We use cookies, pixels, and similar technologies to collect this information. See Section 6 for details.
3. How We Use Information
We use the information we collect to:
- Respond to your inquiry, deliver your scorecard results, and follow up about a potential engagement
- Operate, maintain, secure, and improve the Site
- Analyze how visitors use the Site so we can improve content and user experience
- Send you communications you have requested, including the email containing your full scorecard breakdown
- Measure the performance of our marketing channels and improve our advertising
- Show BrightCircle ads to people who have visited the Site, on advertising platforms such as Meta and LinkedIn
- Create de-identified or aggregated insights about industry patterns
- Comply with legal obligations and enforce our Terms of Use
- Detect, prevent, and respond to fraud or security incidents
We do not sell your personal information for money. We do use advertising pixels from Meta and LinkedIn that share limited information about your activity on the Site with those platforms so we can measure and target our advertising. Some state privacy laws, including California's, may treat this as "sharing" personal information for cross-context behavioral advertising or as processing for targeted advertising. See Section 8 for your choices.
4. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases:
- Consent: When you submit a form, request a scorecard, or opt in to communications, we rely on your consent. You may withdraw consent at any time.
- Legitimate interests: We rely on our legitimate interests to operate the Site, secure it against fraud and abuse, measure marketing performance, and improve our services, where those interests are not overridden by your rights.
- Legal obligation: Where we are required to retain or disclose information to comply with applicable law.
5. How We Share Information
We share information with the third-party service providers and advertising platforms we use to operate the Site and our business, and only to the extent needed for the purposes described in this policy. Those include:
- HubSpot: CRM and form processing. Form submissions create or update contact records in our HubSpot account.
- Google Analytics and Google Tag Manager: Site analytics and tag management.
- Meta (Facebook and Instagram) advertising tools: We use the Meta Pixel, and may use Meta's Conversions API, to measure the performance of our advertising and to show our ads to people who have visited the Site. These tools share information about your interaction with the Site with Meta, such as page views, form submissions, your IP address, and browser and device identifiers. If you submit a form, we may also send Meta a hashed version of your email address so it can match that event to a Meta account. Meta's use of this information is governed by its own privacy policy.
- LinkedIn advertising tools: We use the LinkedIn Insight Tag to measure the performance of our LinkedIn advertising, understand the professional characteristics of Site visitors in aggregate, and show our ads to people who have visited the Site. The Insight Tag shares information about your visit with LinkedIn, such as the pages you view, your IP address, and browser and device identifiers. LinkedIn's use of this information is governed by its own privacy policy.
- Netlify: Hosting and content delivery.
- Email service providers: Sending follow-up emails, scorecard breakdowns, and other communications you have requested.
We may also share information when required by law, for example, to respond to a valid subpoena or court order, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor the commitments in this policy.
6. Cookies and Similar Technologies
We use cookies, small text files stored on your device, and related technologies such as pixels and tags to make the Site work and to understand how visitors use it. The technologies on the Site fall into these categories:
- Essential cookies: Required for the Site to function, including remembering that you have closed a modal during a session.
- Analytics cookies: Used by Google Analytics and Google Tag Manager to understand traffic patterns and improve the Site.
- Form-handling cookies: Used by HubSpot to associate your form submissions with your contact record and to track sources.
- Advertising and measurement pixels: The Meta Pixel and the LinkedIn Insight Tag record specific events on the Site so we can measure ad performance and show our ads to past visitors on those platforms.
You can control cookies through your browser settings. Disabling cookies may affect Site functionality. You can also opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on, you can adjust your Meta ad preferences in your Facebook or Instagram account settings, and you can adjust your LinkedIn ad preferences in your LinkedIn account settings.
7. Data Retention
We retain personal information for as long as it serves the purposes described in this policy, plus a reasonable period for our legitimate business and legal needs. Contact records in our CRM are retained until you ask us to delete them or until they have been inactive for a period we determine is appropriate. Analytics data is retained according to the default settings of our analytics providers. Backup copies may persist for a limited period after deletion.
8. Your Rights and Choices
For all visitors
You may request that we:
- Tell you what personal information we have about you
- Correct inaccurate information
- Delete your information, subject to our legal and business retention needs
- Opt you out of marketing communications
- Stop sending your contact information to advertising platforms
To exercise any of these rights, email us at hello@brightcircle.io. We will respond within a reasonable time. We may need to verify your identity before fulfilling certain requests.
For California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what categories of personal information we collect, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. You also have the right to request access to and deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights. We do not sell personal information for money. Our use of the Meta Pixel and LinkedIn Insight Tag may count as "sharing" personal information for cross-context behavioral advertising under California law, and you have the right to opt out of that sharing. To opt out, email us with "Do Not Share" in the subject line and use the browser and ad-platform controls described in Section 6. We do not knowingly collect or process the personal information of consumers under 16. To submit a request, email us at hello@brightcircle.io. You may also designate an authorized agent to make a request on your behalf.
For residents of the European Economic Area, UK, or Switzerland (GDPR / UK GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (or its UK or Swiss equivalents) including the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local supervisory authority.
9. International Data Transfers
The Site is operated in the United States. Our service providers, including HubSpot, Google, Netlify, Meta, and LinkedIn, also store and process information in the United States and other countries. If you visit from outside the U.S. understand that information you submit will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, our service providers rely on standard contractual clauses or other valid transfer mechanisms.
10. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. The Site is served over HTTPS. Form submissions are encrypted in transit. CRM data is stored in HubSpot's infrastructure, which maintains its own security certifications. No system is perfectly secure, however, and we cannot guarantee the security of any information you transmit to us.
11. Children's Privacy
The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us at hello@brightcircle.io and we will delete it.
12. Do Not Track
Some browsers send a "Do Not Track" signal. There is no industry consensus on how to interpret it, and the Site does not currently respond to DNT signals. You can manage tracking through the cookie and pixel controls described in Section 6.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top. If the changes are significant, we may notify you through the Site or by email. Continued use of the Site after changes are posted constitutes acceptance of the revised policy.
14. Contact
Questions, requests, or concerns about this Privacy Policy or our data practices? Contact us at:
Thesis Music, LLC dba BrightCircle.io
539 W. Commerce St. Suite 578
Dallas, TX 75208
Email: hello@brightcircle.io