1. Our Commitment to Data Integrity

At Bridge & Bolt LLC, we build systems with durability and precision as core principles. We do not sell, rent, or trade your personal or business data to third parties.

2. Information We Collect

We collect the following categories of information:

Account and Contact Information: Name, email address, company name, and other details you provide when contacting us or creating an account via our contact forms.
Product Usage Data (BridgeBoard AI): BridgeBoard AI captures AI conversation data via a Chrome browser extension. Captured data is temporarily queued locally in the browser, then synced to a secure cloud database (hosted on Supabase) authenticated by your user account. Data is secured using row-level security policies, meaning only you (and authorized team members, if applicable) can access your data.
Product Usage Data (Session Zest): Session feedback data submitted through event or feedback forms is stored in our secure cloud database.
Messaging Data (SMS): If you contact a business served by Bridge & Bolt and receive automated text replies, we process your phone number and the content of those messages to respond to and manage your request. See Section 5 (SMS/Text Messaging).
Authentication Data: We use magic-link and OAuth-based authentication. We do not store passwords.
Technical and Diagnostic Data: Anonymous or pseudonymous metadata such as device type, browser type, system performance data, and error logs used to maintain system stability and security.
Cookies and Analytics Data: We may use basic cookies or analytics tools to understand website usage and improve performance. These tools collect aggregated, non-identifying information.

3. Sources of Information

We collect information from:

You directly (e.g., through contact forms, product usage, or a phone call you place to a business we serve).
Your browser or device when using our products.
Authentication providers (e.g., OAuth identity providers).
Integrated third-party services that you explicitly connect or enable.

4. How We Use Information

We use collected information to:

Provide, operate, and maintain our services.
Authenticate users and manage accounts.
Store and retrieve user-generated data securely.
Respond to inquiries you initiate by phone, including automated text replies to unanswered calls.
Improve system reliability, performance, and security.
Respond to support requests and inquiries.
Comply with legal obligations.

5. SMS/Text Messaging

When you call a business served by Bridge & Bolt and your call is unanswered, you may receive text messages from that business to respond to your inquiry. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for assistance. We do not share or sell SMS opt-in or consent data, or your phone number, with third parties for marketing purposes.

How consent works. These messages are initiated by your own phone call to a participating business. When your call is unanswered, an automated text is sent to the number you called from, to respond to the inquiry you started. We do not purchase, rent, or source phone numbers from third-party lists, and we do not send promotional or marketing content through the missed-call reply service.

Opting out. You can stop receiving messages at any time by replying STOP. Reply HELP for assistance. Message and data rates may apply.

Information handled. For text messaging, we process your phone number and the contents of the messages you exchange with the business, solely to respond to and manage your service request.

Service check-ins and review requests. If a business served by Bridge & Bolt completed work for you and you gave that business your mobile number, you may receive up to three text messages after the job: a check-in to confirm the work was completed to your satisfaction, a request to share your experience in a public review, and at most one reminder. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for assistance. We do not share or sell SMS opt-in or consent data, or your phone number, with third parties for marketing purposes.

6. Data Sharing, Third-Party Services, and AI Integrations

We may share information with specific categories of service providers when strictly necessary to operate our services, such as cloud infrastructure, telephony/messaging, and authentication providers.

AI Providers: Our products integrate with third-party AI providers (e.g., OpenAI, Anthropic, Google). BridgeBoard AI does not send your data to any AI provider without your explicit action.

Your Responsibility: When you use features that integrate with third-party AI providers, your data may be processed by those providers in accordance with their respective privacy and data usage policies. We encourage you to review those policies before enabling such integrations.

No AI Training: Bridge & Bolt does not use your data to train artificial intelligence models.

7. Data Storage and Processing

Your data is stored and processed using secure cloud infrastructure. Data may be processed in the United States or other jurisdictions where our service providers operate. We implement safeguards designed to protect information from unauthorized access, disclosure, or misuse.

8. Data Retention

We retain data only as long as necessary to provide our services, comply with legal obligations, and maintain system reliability.

Account and Product Data: Retained while your account is active.
Deleted Account Data: Removed from active systems within 30 days of deletion request.
Backup Data: Retained for up to 30 days.
System Logs and Diagnostic Data: Retained for up to 90 days.

9. Security Measures

We implement administrative, technical, and operational safeguards designed to protect information, including:

Encryption in transit.
Secure authentication controls.
Row-level data isolation and least-privilege permissions.
Regular system monitoring and logging.

10. Data Ownership and Control

You retain ownership of all data you create or capture through our products. You may export or delete your data at any time. For information about how we handle AI model training, see Section 6.

11. Your Rights

You may request:

Access to your personal data.
Correction of inaccurate data.
Deletion of your data.
Export of your data.

To submit a request, email [email protected] with the subject line "Data Request" and include the email address associated with your account. We typically respond within one business day.

12. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will provide notice through email notification or in-product notification. The "Last Updated" date at the top of this policy indicates the most recent revision.

14. Contact

For privacy inquiries or data deletion requests, contact [email protected]. We typically respond within one business day.