Privacy Policy

Account and sign-in information

Every Bridge account needs a verified phone number. We use it to confirm your identity, send sign-in codes, and send account security notices. Workspace profiles can include your name, email address, photo, job title, and preferences.

If you choose Apple or Google sign-in, we receive the provider’s account identifier and the profile information you allow it to share. You can use Apple’s private relay email address. Provider authorization tokens are encrypted on the server. Passwords are stored as hashes. Passkey private keys stay with your authenticator; Bridge stores the public key and credential information needed to verify sign-in.

Registration progress is saved so you can finish setup later. A phone verification code does not grant access to a protected workspace until the additional required security step is complete.

Workspace content and optional features

Bridge stores the content you and other authorized people put into your workspaces, including projects, tasks, comments, inventory, documents, photographs, and attachments. Access depends on workspace membership, roles, permissions, and sharing settings.

Enabled calling features can store telephone numbers, call history, recordings, voicemail, and transcripts. Enabled capture, maps, location, printing, and notification features use the permissions and information required for those actions. Your device controls camera, microphone, photos, location, and notification permissions. Declining an optional permission leaves other available features usable.

Service operation and providers

We use account and workspace information to authenticate people, enforce permissions, synchronize work, deliver the features you request, investigate errors and abuse, and provide support. Operational records can include user and workspace identifiers, IP address, device or installation identifiers, app and browser versions, request information, activity, and performance diagnostics.

Bridge uses service providers for hosting, S3-compatible storage, phone verification and calling, notifications, maps, content processing, and product analytics. This includes Twilio for enabled phone services, Apple or Google when you choose their sign-in service, and PostHog for configured product analytics. Providers receive information needed for the enabled service. Analytics can associate your user identifier, display name, workspace context, and product interactions with your account.

Workspace administrators control membership and business content within their authority. Public share links can make the selected content available to anyone holding the link until it expires or is revoked. Share only content you are authorized to disclose.

Retention and permanent deletion

Account information is retained while the account is in use. Workspace business records remain until the workspace owner or another authorized person removes them under the service’s available controls. Security, operational, and backup records are retained separately for service operation and recovery; this policy does not promise that historical backups are rewritten when an individual account is removed.

You can initiate account deletion from My Profile in the app or website. A workspace owner can delete an entire workspace from Company Settings. During unfinished registration, you can delete the new account from setup. Requests require identity verification and an explicit permanent-deletion confirmation.

Access is revoked when a deletion request is accepted. A background worker then erases the requested active database records and stored files, including object versions and generated files. It waits for previously issued upload permissions to expire before the final purge. Cleanup is retried when a storage or provider error occurs, and the deletion receipt reports whether cleanup is still pending or complete. Deleted accounts and workspaces cannot be restored through Bridge.

Linked product analytics are cleaned up separately with the analytics provider. The receipt can show that Bridge records and files have been erased while analytics cleanup is still pending or needs attention. A request that includes analytics is marked complete only after that cleanup is verified. Provider review and processing can delay completion.

Deleting your account also requires an explicit decision about the workspaces you own. Other people’s workspaces keep their business content. Your personal profile and sign-in information are removed, while historical business attribution can remain as Deleted User. Information contained in another organization’s business records remains subject to that organization’s control; contact that workspace owner about specific content.

Copies already downloaded or exported by someone else and historical disaster-recovery backups are outside immediate active-system erasure. Connected customer-owned services can also have their own records and retention. Contact support for help with a privacy request involving those systems.

Your choices and contact

You can review your profile, manage available sign-in credentials, change optional device permissions, leave or request removal from workspaces, and initiate permanent account deletion. Contact support if you cannot sign in, need an export or correction, or need help identifying the scope of a deletion request.

We will update this page when service data practices change. The effective date identifies the current version.