1. Scope
This Privacy Policy describes how PlatformBridge (“PlatformBridge,” “we,” “us”) handles personal data when you visit our websites, book a call, write to us, or work with us on a customer engagement. When we process personal data contained in Customer Data on behalf of a customer, we act as a processor and that processing is governed by the applicable customer agreement.
2. Information we collect
- Inquiry and contact data — name, email, organization, role, and any details you provide when you book a call, submit a form, or write to us.
- Commercial data — engagement model, billing contact, tax and invoice metadata, and payment status. Card details, if collected, are processed by our payment provider, not stored by us.
- Usage, device, and analytics data — log data, IP address, browser and device type, pages viewed, referring pages, approximate location derived from IP address, event timestamps, cookie identifiers, and website visitor identifiers. We use Apollo.io for website visitor identification and sales analytics.
- Customer Data — system access, credentials, integration artifacts, logs, mappings, runbooks, and other materials you, your customer, or we generate during an engagement. This may contain personal data that you or your customer control.
- Scheduling data — meeting times, calendar metadata, and the information you enter when you book through Calendly.
- Communications — messages you send to us and related metadata.
3. Sources of information
We collect information directly from you and your authorized users, from your customer’s systems when access is provisioned for an engagement, from service providers such as Calendly and Apollo.io, and automatically from your browser or device when you use our websites.
4. How we use information
- to provide, secure, and operate the website and our services;
- to schedule calls and respond to inquiries;
- to perform customer engagements, including connecting your product to a customer’s systems;
- to use model providers as needed for an engagement, subject to the controls in this policy and the customer agreement;
- to process payments and prevent fraud and abuse;
- to provide support, troubleshoot errors, send service-related communications, and maintain audit records;
- to analyze website usage, identify prospective customers, measure marketing effectiveness, and improve the site and the work; and
- to comply with legal obligations and enforce our agreements.
5. Customer engagements and AI providers
During an engagement we may send Customer Data to model providers when that is required to do the work. Your confidential inputs, outputs, and data are not used to train or fine-tune any model made available to other customers, unless you authorize it in writing. We retain our pre-existing technology and non-confidential generalized know-how. We do not hide cross-customer training rights inside language about “improving the service.”
Model providers may retain API data for abuse monitoring for a limited period unless account-specific retention controls apply. Controls we operate, and what we do not claim, are described on our Security & data page.
6. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies and PlatformBridge acts as a controller, we rely on the following legal bases. For Customer Data we process as a processor, the customer determines the legal basis for the underlying processing.
| Purpose | Categories | Legal basis |
|---|---|---|
| Provide deployment and related services | Inquiry, commercial, engagement, and Customer Data | Contract; documented customer instructions for Customer Data |
| Schedule calls and communicate about the work | Inquiry data, meeting details, and communications | Contract and legitimate interests |
| Process billing and keep financial records | Billing, invoice, tax, and commercial data | Contract, legal obligations, and legitimate interests |
| Secure the website and prevent abuse | Device, log, and security event data | Legitimate interests and legal obligations |
| Analyze website visits and support sales outreach | Usage, device, cookie, and visitor identifiers | Legitimate interests; consent where required |
| Comply with law and enforce agreements | Relevant inquiry, billing, usage, and Customer Data | Legal obligations and legitimate interests |
7. How we share information
We share personal data with service providers that help us operate the website and the work, including hosting, email, scheduling, payment, and sales analytics providers. We also share information with systems and recipients you or the customer configure for an engagement. We may disclose information to comply with law, to protect rights and safety, to enforce our agreements, or in connection with a merger, acquisition, financing, reorganization, or sale of assets.
We do not sell personal data for money. We do not knowingly share Customer Data for cross-context behavioral advertising. Where website analytics or advertising-related identifiers are treated as a sale or sharing under applicable law, you may opt out as described below.
8. Categories disclosed
In the last 12 months, we may have collected and disclosed the following categories of personal information for the business purposes described in this policy:
| Category | Examples | Recipients | Sold or shared |
|---|---|---|---|
| Identifiers | Name, email, company, IP address, account or meeting identifiers | Hosting, email, scheduling, and sales analytics providers | Not sold for money. Website visitor identifiers may be treated as sharing under some laws. |
| Commercial information | Engagement model, invoices, billing contact, payment status | Billing and payment providers | No |
| Internet or network activity | Log data, browser data, pages viewed, cookie identifiers | Hosting, security, and analytics providers | Website analytics may be treated as sharing under some laws; you can opt out. |
| Customer Data | System access, credentials, integration artifacts, logs, and work product from an engagement | Hosting providers, model providers used for the engagement, and systems you or the customer direct us to use | No |
| Sensitive personal information | Only if you include it in Customer Data, credentials, or communications | Service providers needed to provide, secure, and support the work | No |
We do not use or disclose sensitive personal information for purposes that require a separate right-to-limit mechanism unless we provide that mechanism.
9. Data retention
We retain personal data only as long as reasonably necessary for the disclosed purposes, subject to legal holds and security, tax, accounting, dispute, and compliance requirements.
| Category | Typical retention |
|---|---|
| Inquiry, sales, and workspace contact data | For the relationship, then as needed for support, audit, security, and legal purposes. |
| Billing and invoice data | For the engagement term and then as required for tax, accounting, chargeback, and legal records. |
| Customer Data | Per the applicable customer agreement. Retention and deletion periods are contractually specified. After an engagement ends, we delete Customer Data from active systems within the period set in that agreement, and from backups in the ordinary backup cycle. |
| Audit, security, and delivery records | For the period needed to operate, secure, investigate, and evidence the work, unless a longer period is required by law. |
| Website analytics data | According to the analytics provider configuration. |
| Communications | For the business relationship and then as needed for quality, legal, or dispute purposes. |
10. Security
We use technical and organizational measures designed to protect personal data, including encryption in transit, encryption of sensitive credentials at rest, logical segregation of customer projects, least-privilege access, secret management, audit logging where technically feasible, and incident response procedures. No method of transmission or storage is completely secure. See Security & data for the controls we operate and what we do not claim.
11. International transfers
We may process and store data in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as the Standard Contractual Clauses, the UK International Data Transfer Addendum or equivalent UK mechanisms, Swiss transfer safeguards where applicable, and other lawful transfer mechanisms. You may request information about applicable transfer safeguards by emailing privacy@platformbridge.ai.
12. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing. You may also have rights to opt out of sale, sharing, targeted advertising, certain profiling, or to limit the use of sensitive personal information. You may have the right to lodge a complaint with a supervisory authority or appeal a denied privacy request. To exercise these rights, contact privacy@platformbridge.ai. If your data is processed on behalf of a customer, we will direct your request to that customer.
PlatformBridge currently operates from the United States. If a specific offering or processing activity requires an EU, UK, or Swiss representative, we will identify that representative in this policy or the applicable customer agreement before the relevant processing begins.
13. California and U.S. state privacy requests
California residents and residents of other U.S. states with applicable privacy laws may submit requests by emailing privacy@platformbridge.ai. Because PlatformBridge operates as an online service, this email address is our designated request method unless we provide an additional method on the website. We may verify your request and, where permitted, ask you to provide information needed to confirm your identity. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising your privacy rights.
If legally required, we will respond to verified consumer requests within 45 days, unless an extension is permitted. If our use of website analytics is considered a sale or sharing under applicable law, you may opt out by contacting us at privacy@platformbridge.ai.
14. Cookies and analytics
We use strictly necessary cookies to operate the website. We also use Apollo.io’s website tracker to understand which organizations visit the site and to support sales outreach. That tracker may collect IP address, pages viewed, referring pages, and identifiers Apollo associates with a visitor or company. When you book a call, Calendly may set cookies and collect the information you enter, as described in Calendly’s own privacy policy.
You can control cookies through your browser settings. Disabling some cookies may affect functionality. To opt out of our use of Apollo website analytics for sales outreach, email privacy@platformbridge.ai.
15. Children
Our websites and services are not directed to children under 16, and we do not knowingly collect their personal data.
16. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by updating the date above and, where appropriate, by additional notice.
17. Contact
Questions or requests? Contact us at privacy@platformbridge.ai, or write to deploy@platformbridge.ai.