Privacy Policy

1. Who we are

BrightStudy is a clinical research discovery service operated by Easy Benefits Help LLC, a Wyoming limited liability company ("we", "us"). Easy Benefits Help LLC is the business responsible for the personal information described in this policy. Our mailing address is:

• Easy Benefits Help LLC
• 30 N Gould St Ste N
• Sheridan, WY 82801
• United States

Privacy contact: privacy@brightstudy.org.

BrightStudy is not a healthcare provider, research institution, study sponsor, clinical site, government program or nonprofit. We do not provide medical advice or treatment.

2. Information we collect

Information you give us

• ZIP code and confirmation that you are 18 or older.
• A general research-interest category you select, and optional preferences about timing, travel distance and whether you have taken part in research before. We call this "health-interest information". We do not ask for diagnoses, medication lists, medical record numbers or insurance information in this flow.
• First name and email address, and a phone number only if you choose to provide one.
• Messages you send us through the contact, data-request, unsubscribe or preferences forms.

Consent records

When you check the email-consent box we store auditable evidence of that consent: your email address, the submission timestamp in UTC, the source of the signup, the landing-page URL, the Meta lead ID, form ID and ad or campaign identifiers where applicable, the consent-text version (currently 2026-07-31.v1), the privacy-policy version, your browser user agent, your double-opt-in status and timestamp, and your unsubscribe status and timestamp.

Information we receive from Meta

If you submit a Facebook or Instagram Instant Form operated by BrightStudy, Meta sends us the fields you completed in that form (such as your name, email address, ZIP code and your selected interest), along with the lead ID, form ID, creation time and the ad or campaign identifiers. We import leads only from approved forms that carry the same email-consent language and a link to this policy.

Technical information

Our servers process standard request data such as IP address, user agent and timestamps for security, fraud prevention and rate limiting. Our first-party analytics record only a page view or an event name (for example "form_start"), the page path with any query string removed, and a random session identifier. Answers you give in the form, your email address, your interest category and any health-related information are never sent to analytics.

3. What we do not do with your information

• We do not send form answers, health-interest information, conditions, email addresses or trial-interest information to Meta Pixel, Google Analytics, session-replay products or advertising networks.
• We do not place health information in page URLs, query strings or event names.
• We do not run session recording on form or account pages.
• We do not buy, rent, scrape, append or otherwise acquire third-party mailing lists, and we never email someone who has not asked us to.

4. Why we use your information

• To show you clinical research listings that may be relevant to your stated interest.
• To send you the confirmation email and, after you confirm, the email updates you asked for.
• To respond to your questions and to handle privacy requests.
• To connect you with a research site, sponsor or recruitment partner when you ask us to.
• To operate, secure and improve the service, including fraud prevention, rate limiting and aggregate reporting.
• To comply with legal obligations and to keep records of consent.

5. Email marketing

Email consent is separate, optional and never pre-selected. We use double opt-in: after you submit the form we send one confirmation message, and no marketing email is sent unless you click the confirmation link. Marketing email is sent from BrightStudy <updates@brightstudy.org>, addressed to one recipient at a time, and includes an explanation of why you are receiving it, a one-click unsubscribe header, a visible unsubscribe link and the Easy Benefits Help LLC mailing address. We do not put medical conditions in subject lines, preview text or sender names. Unsubscribes are honored immediately, and hard bounces and spam complaints are suppressed automatically.

6. How matching works

Our matching is a filter over public study records. We compare the interest category, ZIP code and optional preferences you provide against publicly listed recruiting studies from ClinicalTrials.gov. It produces possible matches only. It does not evaluate your medical eligibility, and no automated decision we make has a legal or similarly significant effect on you. The research site conducts its own screening and makes the final eligibility decision.

7. Service providers

We use vendors to run the service, including website and application hosting, database hosting, email delivery (Amazon Web Services / Amazon SES), error monitoring and customer support tooling. They act on our instructions under contract, may process personal information only to provide their service to us, and may not use it for their own marketing.

8. Sharing with research sites, sponsors and partners

When you ask us to connect you with a specific study, or when you consent to be contacted about opportunities, we may share your name, email address, phone number if provided, ZIP code and stated interest category with the relevant research site, its sponsor, a contract research organization or a recruitment partner so they can contact you about that study. Once they receive your information they handle it under their own privacy practices.

We may be paid a fee by research sites, sponsors or recruitment partners for referrals or for advertising placements. Because compensated disclosure of personal information can meet the definition of a "sale" or of "sharing" or "targeted advertising" under some U.S. state privacy laws, we do not claim that we never sell personal information. You can opt out of this sharing at any time using the data request page or by emailing privacy@brightstudy.org.

We may also disclose information when required by law, to enforce our Terms, or in connection with a merger, acquisition or sale of assets, in which case we will state how the information will be handled.

9. Data retention

• Consent records and suppression records are retained for as long as we operate the mailing program and for at least three years afterward, because we must be able to prove consent and prove that an unsubscribe was honored.
• Contact details and interest information for active subscribers are retained until you unsubscribe or request deletion, and then for up to 30 days while deletion is completed across systems and backups.
• Unconfirmed signups that never complete double opt-in are deleted within 90 days, apart from the minimal record needed to avoid re-contacting you.
• Support correspondence is retained for up to 24 months.
• Server security logs are retained for up to 90 days.

10. Security

We encrypt data in transit with TLS and at rest with our hosting providers' managed encryption. We apply least-privilege access controls, keep credentials in a managed secret store rather than in application code, log administrative access, rate-limit and bot-protect public forms, use CSRF protection and secure HTTP headers, and limit how long we keep data. No system can be guaranteed completely secure, and we do not claim to be "HIPAA certified" or "HIPAA compliant". If a research-site relationship would require handling protected health information, we escalate it for legal and security review before proceeding.

11. Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, to opt out of sale, sharing or targeted advertising, to limit the use of sensitive information, and not to be discriminated against for exercising these rights. You may use an authorized agent where state law allows it.

To make a request, use the data request page or email privacy@brightstudy.org. We acknowledge requests promptly and respond within the time frames set by applicable law, generally within 45 days, with one extension where permitted. We verify requests by confirming control of the email address on file and may ask for additional information if we cannot verify you.

12. Email opt-out

Click the unsubscribe link in any email, use the one-click unsubscribe option offered by your mail provider, or visit our unsubscribe page or email preferences page. Opt-outs take effect immediately. We may still send transactional messages, such as a reply to a request you sent us.

13. Children

The service is for adults 18 and older in the United States. We do not knowingly collect information from children. If you believe a child has provided information, contact privacy@brightstudy.org and we will delete it.

14. Changes to this policy

We will update this policy when our practices change and will revise the version number and effective date at the top of the page. Consent records store the policy version in force at the time you signed up. This is version 1.0, effective July 31, 2026.

15. Contact

Easy Benefits Help LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. privacy@brightstudy.org