Privacy notice

Personal data we collect

• Account data — name, email address, company name, password credentials handled by our authentication provider.
• Product and sourcing content — specifications, images, supplier notes, cost estimates, inspection and shipping records you create.
• Supplier signature data — the name, company, title, email, phone, signature image, IP address, country and browser of anyone who signs an agreement you send.
• Billing data — subscription plan, invoice history and payment status. Card details are handled by our payment provider, never by us.
• Technical data — IP address, device and browser information, and log data needed to operate and secure the service.

Why we process it

To provide the service and your account, generate specifications and documents with AI assistance, collect supplier confirmations and signatures as evidence of agreement, take payment, prevent abuse, comply with legal obligations, and support you.

Who we share it with

• Payment provider (Merchant of Record) — processes subscription payments, taxes, invoices and refunds.
• Cloud hosting and database provider — stores your account and project data.
• AI model providers — receive the spec content needed to generate interviews, documents, scores and translations.
• Recipients you choose — anyone you send a share link or signature request to can see that specification.

We do not sell personal data and we do not use it for third-party advertising.

Retention

Account and project data is kept while your account is active. Signed agreements and their audit trail are retained as long as they may be needed as proof of agreement, unless you ask us to delete them. Deleting your account removes your projects from active systems and from backups on our normal backup rotation.

Your rights

Subject to your local law, you may request access to, correction of, export of, or deletion of your personal data, object to or restrict processing, and withdraw consent. Email privacy@bridji.com and we will respond within 30 days.

International transfers and security

Data may be processed in the United States and other countries where our providers operate, under appropriate safeguards. We protect data with encryption in transit, row-level access controls, and least-privilege access to production systems.

Changes

We will update this notice when our practices change and revise the date above. Material changes will be announced in the app.