Privacy Policy

1. What we collect

• Account info — your name, email, the workspace(s) you belong to, your role, and when you agreed to the Terms (which version, and in which workspace).
• Sign-in data — one-time codes and a log of sign-in events (time, device, approximate location from IP) to keep your account secure.
• Usage & analytics — pages and presentations you view, interactions and conversions, and session activity, recorded by the Portal itself (first-party event logging).
• Content you provide — feedback, form/module responses, and content edits.
• Technical data — browser, device, and log information.

2. How we use it

To provide and secure the Portal; to show your workspace its engagement progress and analytics; and to send communications you’ve enabled (such as notifications and digests). We look at how the Portal is used — pages viewed, features used — to decide what to build next; we never do that with the content of your workspace. We do not sell your data or use it for cross-site advertising.

3. Cookies & analytics

We use essential cookies to keep you signed in. Inside a workspace, the Portal runs no third-party analytics or advertising trackers — no cross-site tracking or advertising profiles. Engagement analytics are first-party and scoped to your workspace: when someone views a shared presentation, the Portal records what was viewed, when, the browser and device type, and an approximate location (country and city) derived from the viewer’s IP address.

The public website, and the Portal’s public help center and presentation-examples pages, use Google Analytics 4 to count visits and which contact links people use. It sets first-party analytics cookies (such as _ga). Visitors in the European Economic Area, the United Kingdom and Switzerland are not given analytics cookies by default. Google’s advertising features are turned off, and we run no advertising.

4. Who we share with

• Your workspace — your activity and submissions are visible to authorized members of your workspace and the Bridger team supporting it.
• Service providers under contract, each only for the job named: Supabase (database and sign-in), Vercel (hosting; Vercel KV holds rate-limit counters), Cloudflare (R2 file storage; Browser Run, which opens published presentations to capture their thumbnails), GitHub (private source repositories for each client’s presentations), Anthropic (AI drafting — see “Your content and how we use AI”), Resend (email delivery), Sentry (error monitoring) and Google (Analytics on the public website, help center and presentation-examples pages; and Bridger staff calendars for time tracking — no client workspace content).
• Destinations you choose — notifications a workspace sends to Slack, Zapier, email or a webhook go wherever the workspace’s settings point them. They are chosen by you, or by Bridger at your request, and are not our subprocessors.
• Legal — where required by law.

5. Data retention

We keep your information while your workspace is active and as needed for your engagement. The specific periods we enforce, and exactly what deleting a workspace removes, are set out in “Your content and how we use AI” at /legal/content-and-ai.

6. How we protect it

Workspaces are isolated from one another — by database row-level security, and by a workspace check on every request the Portal makes — data is encrypted in transit, and sign-in is passwordless.

7. Your choices & rights

You can request access to, correction of, export of, or deletion of your personal data, and manage notification preferences in your account. Contact legal@bridgercreative.com.

California residents: under the CCPA/CPRA you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information, and you won’t be discriminated against for exercising these rights.

8. International transfers

Data may be processed in the United States and other countries where our providers operate, with appropriate safeguards in place.

9. Children

The Portal isn’t intended for anyone under 16, and we don’t knowingly collect their data.

10. Changes & contact

We’ll post updates to this policy here. Questions: legal@bridgercreative.com.