← Back to Bridge

Privacy Policy

Last updated: September 2026

1. Information We Collect

Bridge collects information you provide directly when creating an account and using our service:

  • Account Information: Name, email address, phone number, profile photo, and bio.
  • Profile Data: Education, career details, social media handles, and location information you choose to share.
  • Connection Data: Contacts you add or import, meeting context, notes, and tags.
  • WhatsApp Capture Content: Messages and files you choose to send to Bridge's WhatsApp number, including voice notes. Bridge cannot read your other WhatsApp chats or history.
  • Email & Calendar Content: When you connect a Google account, Bridge stores the metadata and content of emails and calendar events involving your contacts (including the subject and body text) to build your contact Activity timeline (a record of what you discussed and when). This content is associated with your account.
  • Device Information: Push notification tokens, device type, and operating system for delivering notifications.
  • Diagnostics and Performance Data: When the Bridge app or website hits an error or loads slowly, we collect technical details to find and fix the problem: the error and where it happened in our code, the app or browser version, device type and operating system, the screen or page involved, timing measurements, and your Bridge account ID. We do not add your email address to these reports.
  • Public Website Analytics: If you accept analytics, Google Analytics records visits to Bridge's public marketing pages. This can include the page path, visit and session statistics, approximate location, and browser or device information. Query strings are excluded, and analytics is disabled on signed-in CRM pages.

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Bridge service.
  • Facilitate contact exchange between users based on your privacy profile settings.
  • Send push notifications you have opted into (web leads, new connections, reminders, digests).
  • Display your public profile to people you share your link with.
  • Transcribe WhatsApp voice notes only after you turn on the separate Google Gemini transcription option. You can use WhatsApp Capture without enabling transcription.

3. Information Sharing

Your information is shared only as follows:

  • Profile Sharing: When you share a profile link, the fields enabled in your privacy preset are visible to the recipient.
  • Contact Exchange: When someone submits their info via your shared link, their name and contact details are added to your connections.
  • Service Providers: When you use an AI feature, Bridge sends the content needed for that request to one of the AI providers listed below so it can generate the requested result. Bridge also uses the other service providers listed below to operate the service.
  • We do not sell your personal information to third parties.

4. Google User Data

This section describes how Bridge handles data from a connected Google account. It applies in addition to the sections above.

Bridge's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What Bridge asks for, and why:

  • Gmail (read): Reads messages in a mailbox you connect, so Bridge can build your contact Activity timeline, recognize the people you correspond with, and give Rolo the context for meeting briefs and follow-up drafts. Bridge stores message subject and body text, as described in section 1.
  • Gmail (send): Sends a message only when you review it in Bridge and approve that specific message. Bridge does not create Gmail drafts, and does not send email on your behalf without your action.
  • Google Calendar (read and write): Reads events to build meeting context and briefs. Bridge creates a calendar event only when you explicitly ask it to.
  • Google Contacts (read): Imports the contacts you choose to import. "Other contacts" are requested separately and only if you pick that option.
  • Google Sheets (read): Reads only the spreadsheet you supply by pasting its link, so you can import contacts from it. Bridge does not list, browse, index, or store any other file in your Google Drive.

How Bridge limits its use of this data:

  • Bridge uses Google user data only to provide the features described above and elsewhere on this page.
  • Bridge does not use Google user data for advertising of any kind, including personalized or retargeted advertising.
  • Bridge does not sell Google user data.
  • Bridge does not allow its staff to read your Google user data, except where you have given specific permission (for example, when you ask us to look into a support issue), where it is necessary for security purposes or to comply with the law, or in aggregated and anonymized form for internal operations.
  • When you use an AI feature, or enable one that runs automatically, Bridge sends the content that feature needs to an AI provider. Google user data is sent only to the AI providers marked in section 7 as able to receive it; it is not sent to the enrichment-only providers listed there. This transfer is limited to providing the feature. Bridge does not transfer Google user data to any other third party except as described in section 3.
  • Bridge does not use, transfer, or sell raw or derived Google user data to develop, train, or improve foundational or generalized artificial-intelligence or machine-learning models, and does not transfer it to any third party that would use it for that purpose.

You can disconnect a Google account at any time in Bridge's settings, and you can revoke Bridge's access directly from your Google Account permissions page. What happens to content Bridge has already imported is described in section 5.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, Bridge permanently deletes the account data stored in its application database, including your contacts, deals, notes, and stored email and calendar content. Bridge deactivates the authentication record to block further access. A limited deletion audit record is retained, and the automated deletion flow does not currently remove every account-associated file stored outside the application database. Contact us if you want us to review those remaining records or files.

Email & calendar content: Stored email and calendar content (subject and body) is retained while your Google account is connected and while the resulting activity is kept. If you disconnect a mailbox, this activity history is kept by default so your timeline stays intact; it is permanently deleted when you delete your Bridge account (see above).

WhatsApp Capture: Unconfirmed capture context expires and is removed. Disconnecting WhatsApp also revokes the WhatsApp voice transcription preference. Confirmed notes are retained with the contact until you delete them or your Bridge account.

For sampled AI quality comparisons, Bridge may store a limited input preview and generated outputs for up to 30 days, then automatically delete them. Bridge also keeps separate redacted reliability telemetry under its own retention schedule. AI may use your stored email and calendar content for features you invoke or enable (for example, summarizing a thread or drafting a follow-up).

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and JWT-based API access control. OAuth tokens for connected platforms are encrypted at rest using AES-256-CBC.

7. Third-Party Services

Bridge integrates with the following third-party services:

  • Supabase: Authentication and data storage.
  • Google: Contact, calendar, and email imports (with your explicit authorization).
  • LinkedIn, Discord, Slack: Social and workspace integrations (with your explicit authorization).
  • Expo: Push notification delivery.
  • Sentry: Error and performance monitoring for the Bridge app, website, and servers. Sentry receives the diagnostic reports described in section 1, identified by your Bridge account ID and not by your email address.
  • Vercel Speed Insights: Measures how quickly pages on Bridge's website and web app load and respond, including signed-in pages. It records the page address (with invitation links removed), timing measurements, and browser or device type. It measures performance, not what you do on the page.
  • Google Analytics: Consent-based measurement of visits to our public website. Bridge does not use Google Analytics for advertising or on signed-in CRM pages. Learn how Google uses information from sites that use its services.
  • AI Providers that may receive Google user data (Anthropic, Google, OpenAI): Natural-language processing, semantic search, and voice transcription for Rolo AI, meeting briefs, and follow-up drafting. See How Bridge Uses AI for details.
  • Enrichment-only AI Providers (xAI, Perplexity, DeepSeek): Public-source research about your contacts (for example a public social profile or a web search). Bridge does not send Google user data to these providers.
  • Google Gemini for WhatsApp voice notes: If you explicitly turn on WhatsApp voice transcription, Bridge sends the audio bytes from voice notes you submit to Google Gemini for private transcription. Bridge does not contribute this content for shared model training. Google may retain requests and responses for up to 55 days for abuse monitoring.

8. Your Rights

You may:

  • Update or correct your profile information at any time through the app.
  • Control what information is shared via privacy presets.
  • Disconnect third-party integrations at any time.
  • Turn WhatsApp voice transcription off at any time from WhatsApp Capture setup.
  • Delete your account from the Settings screen.
  • Download a copy of your data, including what Bridge derived from it, from Settings on the web. See Your data in Bridge.

9. Children's Privacy

Bridge is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

10. Analytics Choices

You can accept, decline, or change your public website analytics choice at any time. Declining analytics stops future collection and removes Google Analytics cookies available to this site in your browser.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@bridge-ai.social.