BGScreen

Privacy

Privacy Policy

BGScreen is operated by Limelyte Technology Group, Inc. (“Limelyte”, “we”, “us”). This policy explains what information we collect when you use the BGScreen platform and our marketing site at bgscreen.io, how we use it, and the choices you have. If anything is unclear, write to privacy@limelyte.com.

1. Who this policy covers

This policy applies to:

  • The marketing site at bgscreen.io.
  • The BGScreen application, including the admin console, customer sites, and the public API.
  • The BGScreen CLI and any background workers that process orders on behalf of customers.

It does not cover third-party data vendors, bureaus, courts, or other services we connect to in order to fulfill a search. Those parties have their own privacy practices.

Applicant and consumer information is processed on behalf of the customer that ordered the report. Consumers who want a copy of a report, or who want to dispute information in one, should contact the company that ordered or furnished the report.

2. What we collect

From customers: business name, billing contact, payment information processed through our payments provider, product entitlements, and the configuration settings chosen for the account.

From individual users at a customer: name, email address, role, authentication identifiers if you sign in through single sign-on, and a log of actions you take in the application (orders placed, reports viewed, settings changed).

From applicants, on behalf of a customer: identity information (name, date of birth, Social Security number, address, and similar identifiers), questionnaire answers the customer collects, consent records, and the reports and findings returned for an order. That information is the customer’s confidential data. See “How we use it” and “How we protect it” below.

From the marketing site: standard request logs (page, referring URL, device class, country) and any information you submit through the contact form: name, work email, phone, company, role, and message. That form is for business inquiries. Do not send applicant identifiers or consumer-report information through it.

From your browser: session cookies needed to keep you signed in, and preference cookies for things like display settings. We do not use advertising or cross-site tracking cookies.

3. How we use it

We use the information above to:

  • Operate the platform: take applications, place orders, call data vendors, store findings, render reports, and send transactional messages.
  • Authenticate users, enforce per-customer access controls, check product entitlement and permissible purpose, and maintain an audit log of who did what.
  • Bill the customer and meet our tax and accounting obligations.
  • Diagnose errors, monitor reliability, and improve product performance.
  • Send service announcements about an account or material changes to this policy.
  • Comply with legal obligations and respond to lawful requests for information.

We do not sell personal information. We do not use applicant data, consumer reports, or other customer content to train models, to build products for other customers, or for advertising.

4. Who we share it with

We share information only as needed to operate the service:

  • Cloud hosting: data is stored on enterprise cloud infrastructure located in the United States.
  • Data vendors: when a customer orders a search, the identifiers needed to fulfill that search are sent to the vendor the product names. Those vendors operate under their own agreements with the customer or with Limelyte.
  • Payments processor: billing details are handled by our payment provider. Limelyte does not retain full payment card numbers.
  • Email and SMS infrastructure: managed services are used to send service email and, where the customer has enabled it, text messages.
  • Subprocessors: a current list of subprocessors is available on request.

We do not share applicant data or consumer reports with other customers, advertisers, or any party that is not directly involved in operating the service or fulfilling an order.

5. Text messaging (SMS)

If you opt in to text notifications, we use your mobile number to send you the messages you signed up for: application status, verification codes, account and security notices, and replies to support requests. Message frequency varies based on your settings and activity. Message and data rates may apply.

You can opt out at any time by replying STOP to any message, or get help by replying HELP. You can also manage text preferences in account settings where that option is offered.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

6. How long we keep it

Applicant files, orders, reports, and related records are retained for the lifetime of the customer’s account and for a reasonable wind-down period after termination. A customer may request earlier deletion of specific records or of its entire workspace, subject to legal-retention requirements.

Audit logs of vendor exchanges and billing records are retained as required for tax, accounting, and FCRA recordkeeping, typically seven years.

Marketing-site contact submissions are kept as long as needed to respond and for ordinary business records.

7. Your rights

If you are an individual whose information we process, you may:

  • Ask us what information we have about you.
  • Ask us to correct information that is wrong.
  • Ask us to delete information, subject to legal-retention requirements.
  • Object to specific uses of your information.
  • Export your information in a portable format.

For customer-account data, including applicant files processed on a customer’s behalf, requests should be coordinated through the customer’s account administrator. Consumers seeking a consumer report, or wishing to dispute one, should contact the company that ordered or furnished the report. To exercise rights as an individual whose information Limelyte holds directly, write to privacy@limelyte.com.

8. How we protect it

Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using managed cloud key management. Applicant identifiers are encrypted at the application layer. Access is scoped per customer and gated by role. Production systems require multi-factor authentication for Limelyte personnel and are monitored. A summary of our security posture is available at bgscreen.io/security.

9. Children

BGScreen is a business product. We do not knowingly collect information from anyone under 16 through the marketing site or through user accounts. Applicant information about minors is processed only when a customer submits it in the course of a lawful screening.

10. Changes to this policy

We will update this policy when our practices change. Material changes will be announced to account administrators by email.

11. Contact

Limelyte Technology Group, Inc.
privacy@limelyte.com