BrightOps Inventory privacy

What a scan collects

A scan you start collects accessible CRM records and asset definitions, public DNS answers for discovered domains, and screenshots and visible text from reviewed pages in the account you select. This may include contact names and details, account settings and business content. Coverage gaps and failed reads are recorded.

The companion uses your existing Chrome login. It does not copy your browser passwords or cookies into an export. Credential screens are rejected and recognized secret values are redacted. Review the saved evidence before sharing it; ordinary customer information is part of an inventory.

Where it goes and why

The companion sends evidence over HTTPS to your private BrightOps Inventory at shs-onboarding-pilot-production.up.railway.app. BrightOps stores it encrypted on its Railway-hosted service, scoped to the signed-in customer and authorized accounts, so you can review, export and compare migration evidence. Railway processes this storage as our hosting provider. Existing CRM OAuth grants are stored encrypted separately from exported evidence.

We do not sell inventory data, use it for advertising, or send it to an AI model. We do not collect browsing history outside the dedicated scan tab. The service reads the CRM and public DNS; the companion only accesses sites named in the scan. The scan does not send messages, enroll contacts, publish content, update DNS or reconnect integrations. Providers may record normal access logs.

Your controls and retention

Scans run on demand. Stop a scan to revoke further collection. Evidence stays available until you delete its saved inventory. Stop an unfinished scan, then choose Delete saved inventory; this removes active records, evidence and pairing authorizations. Deletion cannot be undone through the service. Recovery copies may retain encrypted data until replaced; contact us for requests concerning recovery copies.

Chrome permissions can be revoked or the companion uninstalled at any time. Uninstalling the companion does not erase inventories you saved on BrightOps. Disconnecting the CRM app revokes its account grant; saved inventories remain encrypted and unavailable through a disconnected session.

Support and data requests

Contact sundar@brightops.io for privacy, access, correction or deletion requests. Please identify the account and scan, and omit passwords, tokens and private keys.