Legal & Compliance

1.1 Data Controller. BrightDevStack, registered at Rua Direita 55, 3500-112 Viseu, Portugal, is the data controller responsible for the processing of personal data collected through our website and service platforms.

1.2 Data Collection. We collect personal data exclusively for the purpose of executing requested services and maintaining client communication. Data categories include: full name, email address, phone number, company name, project specifications, and billing information.

1.3 Legal Basis for Processing. Processing is conducted under Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(a) (explicit consent for marketing communications). No data is processed without a lawful basis.

1.4 Data Retention. Personal data is retained for the duration of the service engagement and for a maximum of 24 months following project completion. Financial records are retained for 7 years in compliance with Portuguese tax regulations.

1.5 Third-Party Sharing. Data may be shared with essential service providers (hosting, payment processing, analytics) under strict Data Processing Agreements (DPAs). No personal data is sold, rented, or disclosed to unrelated third parties.

1.6 International Transfers. Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are implemented including Standard Contractual Clauses (SCCs) approved by the European Commission.

1.7 Your Rights. Under the GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You may exercise these rights by contacting [email protected].

2.1 Scope of Services. BrightDevStack provides custom full-stack web development, secure API backend engineering, database architecture, cloud infrastructure, and related technical services as outlined in individual project proposals and service agreements.

2.2 Service Engagement. All engagements begin upon receipt of the initial project deposit. The scope, deliverables, timeline, and pricing are defined in the project proposal accepted by the client. Changes to scope require written approval and may incur additional costs.

2.3 Payment Terms. Invoices are payable within 14 days of issuance unless otherwise agreed. Deposits are non-refundable and are applied toward the final project total. Late payments may incur a 2% monthly surcharge.

2.4 Intellectual Property. Upon full payment, all custom code, designs, and deliverables created specifically for the client are transferred to the client's ownership. BrightDevStack retains the right to use anonymized project data for portfolio and case study purposes unless explicitly objected to in writing.

2.5 Service Availability. BrightDevStack commits to a 99.9% uptime guarantee for hosted services. Scheduled maintenance windows are communicated at least 72 hours in advance. Unplanned outages are addressed within 4 hours of notification.

2.6 Limitation of Liability. BrightDevStack's total liability shall not exceed the total fees paid by the client for the specific service giving rise to the claim. BrightDevStack is not liable for indirect, incidental, or consequential damages.

2.7 Governing Law. These terms are governed by the laws of the Republic of Portugal. Disputes shall be resolved through the competent courts of Viseu, Portugal, unless otherwise agreed in writing.

3.1 What Are Cookies. Cookies are small text files stored on your device when you visit our website. They help us understand how you interact with our platform and enable essential functionality.

3.2 Essential Cookies. These cookies are strictly necessary for the website to function properly. They enable core features such as session management, navigation, and form submission. These cookies do not require consent under the ePrivacy Directive.

3.3 Analytics Cookies. With your consent, we use analytics cookies to understand how visitors interact with our website. This data is aggregated and anonymized, meaning it cannot be used to identify individual users. Analytics data is retained for 12 months.

3.4 Third-Party Cookies. Our website may include embedded content (e.g., Google Maps) that sets its own cookies. These third-party cookies are governed by the respective privacy policies of the third-party providers. BrightDevStack does not control third-party cookie behavior.

3.5 Managing Cookies. You can control and manage cookies through your browser settings. Disabling essential cookies may impair website functionality. Analytics cookies can be disabled at any time through our cookie consent banner, which is presented on your first visit.

3.6 Cookie Consent. In compliance with the ePrivacy Directive and GDPR, non-essential cookies are only activated after your explicit consent. Your consent preferences are stored locally and can be modified at any time by clearing your browser's local storage.

4.1 Deposit Policy. The initial project deposit (typically 30-50% of the total project value) is non-refundable. This deposit secures your project slot in our development queue and covers initial architecture planning, resource allocation, and setup costs.

4.2 Milestone-Based Refunds. Projects are delivered in defined milestones. If a project is cancelled after a milestone has been completed and approved, payment for that milestone is non-refundable. Refunds may be issued for milestones where work has not yet commenced.

4.3 Cancellation Before Development. If a project is cancelled before development work has begun (within 5 business days of deposit receipt), a refund of 75% of the deposit may be issued at BrightDevStack's discretion, minus any administrative costs incurred.

4.4 Cancellation During Development. Cancellation during active development results in payment for all completed milestones. Any advance payments for future, unstarted milestones will be refunded within 30 business days of the cancellation request.

4.5 Deliverable Disputes. If delivered work materially deviates from the agreed project proposal, BrightDevStack will rectify the discrepancies at no additional cost within 30 days of notification. If rectification is not feasible, a partial refund proportional to the affected scope will be issued.

4.6 Refund Process. Refund requests must be submitted in writing to [email protected]. Approved refunds are processed within 30 business days via the original payment method. BrightDevStack reserves the right to deduct reasonable administrative fees from refund amounts.

4.7 Exceptional Circumstances. In cases of force majeure, prolonged mutual inactivity (exceeding 90 days without client response), or breach of terms by either party, refund terms are assessed on a case-by-case basis in accordance with Portuguese consumer protection law.