Bright Data says it collects only public data, but whether scraping is lawful depends on the target website, its terms of service, the type of data and the jurisdiction, and this risk is borne by the user.