Brightcove Inc. and its affiliates ("Brightcove" or "we") want you to be familiar with the information we collect about users of The Bright Spot - a Brightcove Community (the "Bright Spot"), how we use and share that information, and the choices you have regarding the information you provide. This Privacy Policy ("Privacy Policy") describes our practices with respect to information collected through your access and use of the Bright Spot, available at https://community.brightcove.com (the "Site"). Your use of the Brightcove website or its services (https://www.brightcove.com) is subject to the Brightcove Privacy Policies available at https://www.brightcove.com/en/legal/brightcove-privacy-policies/. Any capitalized terms not otherwise defined in this Privacy Policy shall have the meaning ascribed to such capitalized term in the Bright Spot Terms of Use, available at https://community.brightcove.com/site/terms ("Terms of Use").

We designed Bright Spot so that customers, partners, employees, video streaming enthusiasts, and other users can connect, learn, and share ideas and best practices with respect to Brightcove’s products and services. Because we want this to be a safe and inclusive space, we are transparent about the personal data we collect about you, how it is used, and with whom it is shared.

Please read and consider this Privacy Policy prior to accessing, using, and/or registering to use Bright Spot. By accessing and/or using Bright Spot, you agree to this Privacy Policy. If you do not agree with this Privacy Policy, do not use Bright Spot. If you use Bright Spot, that will constitute your consent to the use of your information for the purposes stated in this Privacy Policy and the Terms of Use.

1. INFORMATION YOU SHARE WITH US

a. Basic Profile Information

This Privacy Policy applies when (a) you access Bright Spot, and (b) when you use Bright Spot to create a profile and participate within Bright Spot. While you have to provide us with some personal data so that we can provide Bright Spot to you, the only mandatory information required for you to register for Bright Spot is your full name,your business email address and your company (collectively referred to as “Basic Profile Information”). Since your display name and/or nickname will be made available to the public, you can either use your real name or a pseudonym. While your username will be your verified business email, you will need to create a unique password. After you create an account within Bright Spot, you can choose what you want to provide in your profile by editing it at any time through your profile page within Bright Spot. Optional personal information you can provide is your job title, a bio, your city and country and a profile picture.

b. Publicly Avaiblabe Information

Any Content you make available through Bright Spot can be accessed and/or seen by other Bright Spot members, non-members, and may be searchable through the web via search engines. This includes your Basic Profile Information, unless we provide you an option through Bright Spot to hide or limit the visibility of such Content. Please do not provide any Content that you do not want to be displayed to other Bright Spot members, Brightcove employees, non-members, or that may be accessed through the web via search engines. By providing Content, including personal data (i.e., personal information), you are consenting to the collection, processing, and use of such Content in accordance with this Privacy Policy. It will also be subject to the Terms of Use.

c. Usage Information

We will also collect information relating to your use of Bright Spot, such as when you login to Bright Spot and other log data, information contained within your Content, your conversations with us, including any submitted support tickets or feedback, and general usage data. We will also keep a record of any Content that has been reported to us as violating the Terms of Use, the review of such Content, the Bright Spot member(s) responsible for such Content, and any decisions made about said Content.

We will collect that information directly from you through cookies and tags set on the Site. We do not set any retargeting or marketing cookies. Please note that because we use cookies to authenticate your login, users that disable cookies cannot use secure plugins that capture login credentials on their browsers, which will create a more difficult user experience.

2. HOW THAT INFORMATION IS USED.

We use your Basic Profile Information to provide you with access to Bright Spot and its features. We will also use this information to verify your identity and to respond to any communications, including those relating to data subject rights under applicable privacy laws. We may share your Basic Profile Information or usage information with service providers to enable certain features, protect your account and information, and for support or other system issues.

Because we want to make Bright Spot an inclusive and open space, if you choose to display your pronouns, we may use that information, and any other information you choose to display, to suggest membership within sub-groups of Bright Spot. We do not tolerate any abusive or hostile behavior, and will take action in accordance with our Terms of Use against any Bright Spot member that uses that information or those groups in violation of our Terms of Use.

We may also use any Content, feedback and opinions you share with us or direct to a Brightcove employee, to update our policies, Terms of Use, the Site and improve or further develop our products and services, operations, and strategies. If you are a current Brightcove customer, this information will be treated as “Feedback” under your service agreement with Brightcove.

We will also use your Content to address any issues raised by Bright Spot members and provide product support. Your Content may further be used to update our support documentation or improve our products and services, including our approach to customer service and support, and business development strategies.

We will use information collected by Bright Spot to understand frequent searches, suggest relevance-based search results, to view site traffic, and other use metrics in order to secure and improve the Site, its features, our services, address and avoid issues and disruptions, and provide more relevant features.

We will not use the information in a way that is inconsistent with or unrelated to these purposes without first obtaining your separate permission for such use.

3. LAW, HARM & THE PUBLIC INTEREST.

Notwithstanding anything to the contrary in this Privacy Policy or controls we may otherwise offer to you, we may preserve, use, share, or disclose your personal data or other data if we believe that it is reasonably necessary to comply with a law, regulation, legal process, or valid governmental request; to protect the safety of any person; to protect the safety or integrity of the Bright Spot platform, including to help prevent spam, abuse, or malicious actors on our services, or to explain why we have removed content or profiles from Bright Spot; to address fraud, security, or technical issues regarding Bright Spot and/or our products and services generally; or to protect our rights or property, or the rights or property of those who use Bright Spot. However, nothing in this Privacy Policy is intended to limit any legal defenses or objections that you may have to a third party, including a government’s request to disclose your personal data.

4. CHILDREN’S DATA.

Bright Spot is not directed towards, intended for, or marketed to, children, and you may not use any of our services if you are under the age of 13. You must also be old enough to consent to the processing of your personal data in your country (in some countries we may allow your parent or guardian to do so on your behalf), which for most countries is 18 years old. If we are alerted that we may have inadvertently received information on a child, we will delete that information and terminate that profile.

5. EUROPEAN TERRITORY MEMBERS.

Brightcove provides specific additional rights, if you are a user residing in the European Economic Area (EEA) or United Kingdom (UK) who interact with Bright Spot, such as the right to: access, correct, object to processing, delete, or obtain a copy of in a structured and mechanically readable format of, your Content. If you are a Bright Spot user residing in the EEA or UK, you may also (a) contact our data protection officer with questions, comments, complaints or requests, (b) file a complaint with the responsible supervisory authority if you believe our processing of your personal data is violating applicable law, and (c) withdraw your consent where consent was the basis for processing your personal data. Please note that when you delete your account, your Content will remain on Bright Spot, but the Content will cease to be attributed to you. To exercise any of these rights, please contact privacy@brightcove.com with your full name, email you used to register for the Bright Spot, and your country of residence.

We will use this information to confirm your identity and EEA-UK region residency, in order to process your data rights request. We cannot process your request under the law if you do not provide us with sufficient detail to allow us to understand and respond to it.

6. CALIFORNIA MEMBERS

In addition to the information in this Privacy Policy, if you are a California resident, you have the right, for the 12-month period immediately preceding the request: (a) we provide details about the categories of personal information we collect about you, including how we collect and share it; (b) the correction or deletion of personal information we collected from you; (c) we provide you access to the personal information we collected from you; and (d) to contact us if there are any questions, comments or requests in connection with our Privacy Policy.

California residents also have the right to opt out of “sales” or “sharing” of their personal information. We do not “sell” personal information as most people would typically understand that term. However, we do allow certain unaffiliated partners and service providers to collect information about users directly for purposes of analyzing and optimizing Bright Spot and ads, providing content more relevant to you, measuring statistics and the success of ad campaigns, and detecting and reporting fraud. You can opt out of any potential sharing or sales at the link below:

Do Not Sell or Share My Personal Information

where you can exercise your rights to opt-out of cookies, analytics and personalized advertising. You can also opt out of non-essential cookies through the cookie consent portal that pops up when you reach Bright Spot.

To exercise a data right, please complete the webform located here. You will, at a minimum, need to provide the following: your name, business or other email address, company name and country, and if applicable, state of residence, as well as your request type and your relationship to Brightcove. We will use your email and mobile phone number to verify your identity. We will not use your mobile number other than to assist in processing the request or in any other way you’ve previously permitted us to use it. We will process any requests within a reasonable period of time, and in any case in accordance with applicable law.

7. NEVADA MEMBERS

If you are a Nevada resident who interacts with Bright Spot, you have the right to opt out of the “sale” of your personal information. We do not sell personal information, as that term is defined under Nevada privacy law.

8. ALL INTERNATIONAL MEMBERS

While we are a US-based company, to enable the sharing of a multitude of experiences and voices, we make our services available globally, where permitted. In some of the countries to which we transfer personal data, like the United States, the privacy and data protection laws and rules regarding when government authorities may access data may vary from those of your country. The United States data protection framework is comprised of state laws and sectoral regulations based on entity type - like banks or credit bureaus - or the information type - like financial information or electronic medical records. As such, not all information at the state level is treated similarly. However, Brightcove applies GDPR principles, and complies with state law where those requirements differ. Where the laws of your country allow you to do so, you authorize us to transfer, store, and use your data in the United States. When we transfer personal data outside of the European Union, Switzerland, Japan, Brazil, or the United Kingdom, to the United States, we do so because we have reason to believe that we can ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws and/or contractual obligations placed on the recipient of the data. Depending on your country of residence, you may also have certain rights with respect to your personal data, such as access; correction; deletion; to object to processing for direct marketing purposes; to withdraw consent for data collected based on your consent; to restrict processing; and/or to portability in a commonly used and machine-readable form. To exercise a data subject right, please contact Support or privacy@brightcove.com with the Subject Line: Data Rights Request. Within the request, please provide the following: your name, corporate email, company name and country and, if applicable, state of residence. We will process any requests within a reasonable period of time, and in any case in accordance with applicable law. Please keep in mind that when you ask us for your personal data or ask us to delete it, we may need to redact or withhold some of the information for security or legal reasons. For instance, we need your Basic Profile Information in order to maintain your account and requested services. That means if you ask us to delete that information, we may not be able to continue providing you with Bright Spot access.

a. EU-US Data Privacy Framework & UK Extension to the Framework

We have certified our compliance with the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the “Data Privacy Framework”) with respect to the Personal Data of users of Bright Spot who are residents of the European Union, European Economic Area , the United Kingdom and Switzerland that we receive and process through Bright Spot. We certify that we adhere to the Data Privacy Framework principles of notice, choice, onward transfer, security, data integrity, access and enforcement (the “Data Privacy Framework Principles”) for Personal Data of users of Bright Spot in the countries participating in the Data Privacy Framework. We are responsible for the processing of personal data we receive under the Data Privacy Framework and subsequently transfer to a third party agent, and may be liable for onward transfers in violation of the Data Privacy Framework Principles. Our certification is available here. Brightcove’s commitments under the Data Privacy Framework are subject to the investigatory and enforcement powers of the United States Federal Trade Commission.

If you are a resident of a country participating in the Data Privacy Framework, you may direct any questions or complaints concerning our Data Privacy Framework compliance to our Data Privacy Framework and Data Protection Contact listed below. We will work with you to resolve your issue.

If you have not received a timely or satisfactory response to your concern relating to data processed under the Data Privacy Framework, you may contact our U.S.-based dispute resolution provider, at no cost to you, at https://feedback-form.truste.com/watchdog/request. If neither Brightcove nor our independent dispute resolution provider resolves your complaint, you may have the right to invoke binding arbitration through the Data Privacy Framework panel. However, prior to initiating such arbitration, a resident of a country participating in the Data Privacy Framework must first: (1) contact us and afford us the opportunity to resolve the issue; (2) seek assistance from our designated independent dispute resolution provider; and (3) contact the U.S. Department of Commerce (either directly or through a European DPA) and afford the Department of Commerce time to attempt to resolve the issue. If a resident invokes binding arbitration, each party shall be responsible for its own attorney’s fees. Pursuant to the Data Privacy Framework, the arbitrator(s) may impose only individual-specific, non-monetary, equitable relief necessary to remedy any violation of the Data Privacy Framework Principles with respect to the resident.

b. Data Privacy Framework and Data Protection Contact

Your Data Privacy Framework and Data Protection Contact for the personal data that we process in connection with Bright Spot is:

Brightcove Inc.
Attn: Chief Privacy Officer
281 Summer Street
Boston, MA 02210
Phone: +1 617 500 4947
privacy@brightcove.com

Please include sufficient information so we can understand and respond to your specific question.

c. Digital Services Act-Based Complaints and Disputes

If, after following the appeals process, you have not received a timely or satisfactory response to your concern relating to the suspension or termination of your account due to the content you posted or your behavior in violation of the Community Guidelines, you may (but do not have to) contact our U.S.-based dispute resolution provider, as provided in paragraph (a) above, at no cost to you, at https://feedback-form.truste.com/watchdog/request. If neither Brightcove nor our independent dispute resolution provider resolves your complaint, you may have the right to file in a court of competent jurisdiction.

9. RETENTION

We will retain your personal information for the length of time needed to fulfill the purposes outlined in this Privacy Policy and our agreements with you unless a longer retention period is required or permitted by law for internal uses. We will honor any deletion requests we receive in accordance with the laws applicable to that information.

10. SECURITY

The security of personal data that Brightcove collects from Bright Spot participants is of great importance to Brightcove. We use organizational, technical, and administrative measures to protect personal data or information under our control, and have certifications from independent security review organizations. No data transmission over the internet or data storage system, however, can be guaranteed to be 100% secure. If you have any questions about the security of your personal data, you can contact us at privacy@brightcove.com with security in the subject line of your request.

11. AFFILIATES AND CHANGE OF OWNERSHIP

In the event that we are involved in a bankruptcy, merger, acquisition, reorganization, or sale of assets, your personal data may be disclosed or transferred as part of that transaction. This Privacy Policy will apply to your personal data as transferred to the new entity. We may also disclose personal data about you to our corporate affiliates in order to help operate our services and our affiliates’ services if necessary to provide this community.

12. CHANGES AND UPDATES

We may update this Privacy Policy to reflect changes to our information and privacy practices. If we make any material changes, we will notify you by posting on Bright Spot or on the page where this Privacy Policy is hosted prior to, or simultaneously with, the change becoming effective. Your continued use of Bright Spot after any such modification constitutes acceptance of any such modified Privacy Policy. We encourage you to review this page periodically for the latest information on our privacy practices. The date of last revision is shown at the bottom of this Privacy Policy.

13. CONTACT US.

If you have any questions regarding this Privacy Policy, please contact us by email at privacy@brightcove.com, or write to:

Attn: Privacy Team
Brightcove Inc.
281 Summer Street
Boston, MA 02210

Please be sure to include sufficient information so we can understand and respond to your specific question or request.

LAST MODIFIED: February 20, 2024