Last updated: May 7, 2026
1. Overview
This Privacy Policy explains how Thesis Music, LLC, a Texas limited liability company doing business as BrightCircle.io ("BrightCircle," "we," "us," or "our"), collects, uses, shares, and protects information you provide when you visit brightcircle.io (the "Site") or interact with our forms, diagnostic tools, and email communications. It applies to information collected through the Site and through the tools we host on it. It does not cover the data practices of any third party we link to.
For purposes of GDPR and similar laws, BrightCircle acts as the data controller for personal information collected through the Site. By using the Site, you consent to the practices described here.
2. Information We Collect
Information you give us
When you submit a form on the Site — including the Marketing Scorecard diagnostic, the Talk to Us contact form, or any inquiry — we collect the information you provide. That typically includes:
- First name
- Email address
- Company name
- Website URL (optional)
- Approximate monthly paid media spend (optional)
- Diagnostic answers and resulting scorecard pattern (Marketing Scorecard only)
- Any free-text message or context you send us
Information collected automatically
When you visit the Site, we and our service providers automatically collect certain information about your device and your interaction with the Site, including:
- IP address and approximate geographic location
- Browser type and version, device type, operating system
- Referring URL and pages visited on the Site
- Date and time of visit, time spent on each page
- Aggregate behavioral data (clicks, scrolls, form interactions)
- UTM parameters and campaign attribution data
We use cookies, pixels, and similar technologies to collect this information. See Section 6 for details.
3. How We Use Information
We use the information we collect to:
- Respond to your inquiry, deliver your scorecard results, and follow up about a potential engagement
- Operate, maintain, secure, and improve the Site
- Analyze how visitors use the Site so we can improve content and user experience
- Send you communications you have requested, including the email containing your full scorecard breakdown
- Measure the performance of our marketing channels and improve our advertising
- Create de-identified or aggregated insights about industry patterns
- Comply with legal obligations and enforce our Terms of Use
- Detect, prevent, and respond to fraud or security incidents
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act and California Privacy Rights Act.
4. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases:
- Consent — When you submit a form, request a scorecard, or opt in to communications, we rely on your consent. You may withdraw consent at any time.
- Legitimate interests — We rely on our legitimate interests to operate the Site, secure it against fraud and abuse, measure marketing performance, and improve our services, where those interests are not overridden by your rights.
- Legal obligation — Where we are required to retain or disclose information to comply with applicable law.
5. How We Share Information
We share information only with the third-party service providers we use to operate the Site and our business, and only to the extent needed for them to provide their services to us. Those providers include:
- HubSpot — CRM and form processing. Form submissions create or update contact records in our HubSpot account.
- Google Analytics and Google Tag Manager — Site analytics and tag management.
- Meta (Facebook) advertising tools — We expect to deploy a Meta Pixel and the Conversions API in the near future to measure the performance of paid advertising campaigns and improve targeting. When live, these tools will share limited information about your interaction with the Site (such as page views, form submissions, and a hashed identifier derived from your email if you submit a form) with Meta.
- Netlify — Hosting and content delivery.
- Email service providers — Sending follow-up emails, scorecard breakdowns, and other communications you have requested.
We may also share information when required by law, for example, to respond to a valid subpoena or court order, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor the commitments in this policy.
6. Cookies and Similar Technologies
We use cookies — small text files stored on your device — and related technologies such as pixels and tags to make the Site work and to understand how visitors use it. The technologies on the Site fall into these categories:
- Essential cookies — Required for the Site to function, including remembering that you have closed a modal during a session.
- Analytics cookies — Used by Google Analytics and Google Tag Manager to understand traffic patterns and improve the Site.
- Form-handling cookies — Used by HubSpot to associate your form submissions with your contact record and to track sources.
- Advertising and measurement pixels — When we activate the Meta Pixel (and any similar pixels in the future), they will record specific events on the Site to measure ad performance and improve targeting on those platforms.
You can control cookies through your browser settings. Disabling cookies may affect Site functionality. You can also opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on, and you can adjust your Meta ad preferences in your Facebook or Instagram account settings.
7. Data Retention
We retain personal information for as long as it serves the purposes described in this policy, plus a reasonable period for our legitimate business and legal needs. Contact records in our CRM are retained until you ask us to delete them or until they have been inactive for a period we determine is appropriate. Analytics data is retained according to the default settings of our analytics providers. Backup copies may persist for a limited period after deletion.
8. Your Rights and Choices
For all visitors
You may request that we:
- Tell you what personal information we have about you
- Correct inaccurate information
- Delete your information, subject to our legal and business retention needs
- Opt you out of marketing communications
To exercise any of these rights, email us at hello@brightcircle.io. We will respond within a reasonable time. We may need to verify your identity before fulfilling certain requests.
For California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what categories of personal information we collect, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. You also have the right to request access to and deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights. We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are defined under California law. We do not knowingly collect or process the personal information of consumers under 16. To submit a request, email us at hello@brightcircle.io. You may also designate an authorized agent to make a request on your behalf.
For residents of the European Economic Area, UK, or Switzerland (GDPR / UK GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (or its UK or Swiss equivalents) including the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local supervisory authority.
9. International Data Transfers
The Site is operated in the United States. Our service providers, including HubSpot, Google, Netlify, and Meta, also store and process information in the United States and other countries. If you visit from outside the U.S., understand that information you submit will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, our service providers rely on standard contractual clauses or other valid transfer mechanisms.
10. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. The Site is served over HTTPS. Form submissions are encrypted in transit. CRM data is stored in HubSpot's infrastructure, which maintains its own security certifications. No system is perfectly secure, however, and we cannot guarantee the security of any information you transmit to us.
11. Children's Privacy
The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us at hello@brightcircle.io and we will delete it.
12. Do Not Track
Some browsers send a "Do Not Track" signal. There is no industry consensus on how to interpret it, and the Site does not currently respond to DNT signals. You can manage tracking through the cookie and pixel controls described in Section 6.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top. If the changes are significant, we may notify you through the Site or by email. Continued use of the Site after changes are posted constitutes acceptance of the revised policy.
14. Contact
Questions, requests, or concerns about this Privacy Policy or our data practices? Contact us at:
Thesis Music, LLC dba BrightCircle.io
539 W. Commerce St., Suite 578
Dallas, TX 75208
Email: hello@brightcircle.io