Privacy policy

Last updated: 2026-05-26

1. Who we are

Brilliant AI is a trading name of Brilliant Studios. We are the data controller for the personal data described in this notice. You can contact us at privacy@brilliantstudios.co.uk.

2. The data we hold

  • Account data - your name, email, business name and authentication credentials.
  • Business context - the information you give us during setup so the agents can act for you.
  • Operational data - the conversations, drafts, signals and audit-trail rows the platform produces while serving you.
  • Customer data you bring - the customer records you connect via your CRM. We hold this only to act on your instructions.

3. What we do with it

  • Run the platform you signed up for.
  • Draft and (where you authorise) send communications.
  • Produce reports and dashboards for you.
  • Improve YOUR platform - not anyone else's.

4. Lawful basis

For your own account data we rely on contract (you signed up). For your customers' data we act as a data processor on your behalf; you remain the controller and decide the lawful basis. For any communication we send on your behalf we record the channel + the consent grant for that channel.

5. Where it lives

On UK and EU infrastructure, encrypted at rest, with per-tenant isolation. We do not transfer personal data outside the UK / EEA except under standard contractual clauses with a suitable adequacy assessment. The AI models we use run inside the EU.

6. How long we keep it

Account data: for as long as you have an account, then 30 days after cancellation. Operational + audit data: 12 months by default; longer if a regulator requires it. You can request earlier deletion at any time.

7. Your rights

You have the right to access, correct, delete, restrict processing, port your data and object. Email privacy@brilliantstudios.co.uk and we'll respond within one calendar month.

8. Cookies

We use a small, privacy-respecting set of cookies — see the cookie policy for the full list.

9. Complaints

If you're unhappy with how we've handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/. We'd appreciate the chance to fix it first, though.