Privacy Policy
Effective 2026-04-25
brightvalleymedia.com/legal/privacy/
This Privacy Policy covers three groups of people whose information we may handle:
We collect basic analytics data through Google Analytics (page views, referrer, approximate location at the city level, device type, and time spent on the site). We do not use Google Analytics' advertising or remarketing features. The site sets a small number of first-party cookies for analytics; no third-party advertising cookies are placed by us.
When you contact us by email, phone, web form, or in person, we collect your name, business name, email address, phone number, and the contents of what you sent us. We use this information only to respond and to evaluate whether we can help you.
When you become a client, we collect the information needed to deliver the services in your Statement of Work. This typically includes business contact information, billing information processed by our payment processor (currently Stripe — we never store full card numbers ourselves), authorized signers, brand assets you provide to us, and operational details about the work we are producing.
When you authorize Bright Valley Media to publish content on your behalf to a third-party platform — for example by completing the OAuth flow that connects your Facebook Page or Instagram Business account, your TikTok creator account, or your YouTube channel — we receive and store an access token issued by that platform along with the minimum profile information that platform returns (such as the page or channel name, profile image, and identifier). We use these credentials only to publish, schedule, and read engagement data for the content you have asked us to manage.
We do not request or store your password for any third-party platform. Authorization is granted through the platform's own OAuth flow and can be revoked by you at any time from that platform's settings, which immediately ends our ability to act on the connected account.
We use the information we collect to:
We do not sell personal information. We do not use the contents of client communications, brand assets, or content scheduled through our publishing tools to train any third-party AI models or for any purpose unrelated to delivering the services we have been engaged to provide.
Some information is necessarily processed by service providers we rely on to operate. We choose providers that publish their own privacy practices, and we limit what we share to what is required for them to perform their function.
This section provides additional detail required by the platforms whose APIs we use on behalf of clients.
When you authorize the Bright Valley Media application registered with Meta to act on your Facebook Page or linked Instagram Business / Creator account, we receive a Page Access Token with the permissions you granted (which may include reading page profile information, managing posts, managing engagement, publishing Instagram content, and basic Instagram profile data). We use these permissions only to schedule, publish, edit, delete, and report on posts you have asked us to manage on the connected account. We retain the access token only for as long as the connection remains active in our system. You can revoke our access at any time from your Facebook account settings under Business Integrations; doing so immediately ends our ability to read or publish on the connected account, and we will delete the corresponding access token from our active systems within thirty (30) days.
When you authorize the Bright Valley Media application registered with TikTok to act on your TikTok account, we receive an access token with the permissions you granted (which may include reading basic profile information and publishing video or photo content via TikTok's Content Posting API). We use these permissions only to schedule, publish, and report on content you have asked us to manage. You can revoke our access at any time from your TikTok account settings under Manage app permissions; doing so immediately ends our ability to read or publish on the connected account, and we will delete the corresponding access token from our active systems within thirty (30) days.
When you authorize the Bright Valley Media application registered with Google to act on your YouTube channel, we receive an OAuth access token with the YouTube Data API scopes you granted (which may include reading channel information and uploading or managing videos). We use these permissions only to schedule, upload, and report on videos you have asked us to manage. You can revoke our access at any time from your Google account permissions page; doing so immediately ends our ability to read or publish on the connected channel, and we will delete the corresponding access token from our active systems within thirty (30) days.
Data we receive from any connected platform is used only to perform the services you have asked us to perform on that account. We do not share platform data with any party outside our service providers, we do not use it for advertising, we do not sell it, and we do not transfer it to any data broker, location data broker, or analytics provider beyond what is necessary to deliver the service. We do not use platform data to train any machine learning or AI model.
We keep information only as long as we need it. Specifically:
You may at any time:
Our website and services are not directed to children under thirteen (13). We do not knowingly collect personal information from children under thirteen (13). If you believe a child has provided us information, contact us and we will delete it.
We use reasonable administrative, technical, and physical safeguards to protect information we hold, including encryption in transit, access controls on our systems, and least-privilege handling of credentials. No system is perfectly secure; if we ever discover a security incident affecting your information, we will notify affected parties as required by applicable law.
We may update this Privacy Policy from time to time. The current version is always posted at brightvalleymedia.com/legal/privacy/ with the effective date shown at the top. Material changes will be communicated by email to active clients at least thirty (30) days before they take effect.
Questions, requests, or concerns about this Privacy Policy or our handling of your information:
Bright Valley Media
Attn: Nathan LaValley
Deltona, FL, United States
Email: contact@brightvalleymedia.com
Phone: (321) 578-8477