Privacy Policy

1. What we collect

• Account info — your name, email, the workspace(s) you belong to, and your role.
• Sign-in data — one-time codes and a log of sign-in events (time, device, approximate location from IP) to keep your account secure.
• Usage & analytics — pages and presentations you view, interactions and conversions, and session activity, via privacy-respecting analytics and first-party event logging.
• Content you provide — feedback, form/module responses, and content edits.
• Technical data — browser, device, and log information.

2. How we use it

To provide and secure the Portal; to show your workspace its engagement progress and analytics; to send communications you’ve enabled (such as notifications and digests); and to improve the product. We do not sell your data or use it for cross-site advertising.

3. Cookies & analytics

We use essential cookies to keep you signed in. Analytics are privacy-respecting — no cross-site tracking or advertising profiles. Page-level metrics use Plausible; engagement events are first-party and scoped to your workspace.

4. Who we share with

• Your workspace — your activity and submissions are visible to authorized members of your workspace and the Bridger team supporting it.
• Service providers under contract — e.g. Supabase (database & authentication), Vercel (hosting), Resend (email delivery), Sentry (error monitoring).
• Legal — where required by law.

5. Data retention

We keep your information while your workspace is active and as needed for your engagement, then delete or anonymize it in line with our retention practices.

6. How we protect it

Workspaces are isolated from one another (row-level security), data is encrypted in transit, and sign-in is passwordless. Access is limited to people who need it.

7. Your choices & rights

You can request access to, correction of, export of, or deletion of your personal data, and manage notification preferences in your account. Contact legal@bridgercreative.com.

California residents: under the CCPA/CPRA you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information, and you won’t be discriminated against for exercising these rights.

8. International transfers

Data may be processed in the United States and other countries where our providers operate, with appropriate safeguards in place.

9. Children

The Portal isn’t intended for anyone under 16, and we don’t knowingly collect their data.

10. Changes & contact

We’ll post updates to this policy here. Questions: legal@bridgercreative.com.