Full Privacy Policy.

This Privacy Policy describes how Bridge IR Co. (“Bridge IR,” “we,” “us,” or “our”) collects, uses, stores, and protects information in connection with the Bridge IR platform (the “Service”). By using the Service, you acknowledge and agree to the practices described in this policy. This policy applies to founders, investors, and authorized users who access the platform.

We collect information that you provide directly to us, such as your name, company, email address, and account credentials. We also collect relationship and communication context that founders choose to upload, including investor records, notes, and engagement context. In addition, we automatically collect certain technical information—such as usage activity, device and browser data, and log data—when you interact with the Service.

We use information to operate, maintain, and improve the Service; to generate Relationship Intelligence scores and behavioral signals; to provide customer support; to communicate with you about your account; to monitor for security and fraud; and to comply with legal obligations. Where applicable, our AI models use platform activity—not personal information—to generate insights.

Founders control the information they bring to Bridge IR. Founders decide what investor records, communication context, and relationship notes are stored on the platform, and what remains private to them. Bridge IR does not require founders to upload any particular data beyond what is necessary to operate their account.

Investors see only what a founder chooses to share. Bridge IR does not expose founder data to investors without explicit, permission-based sharing initiated by the founder. Investor access is scoped to the information a founder elects to make visible.

Data belongs to the customer. Bridge IR is a steward of customer data, not its owner. Customers retain ownership of their information at all times, including relationship records, notes, and any content uploaded to the platform.

Bridge IR never sells customer data to third parties. Customer information is not a product and is never monetized through sale, license, or transfer to data brokers or advertisers.

Customer data is stored in encrypted, access-controlled systems with clear retention practices. Data is logically separated by customer and protected throughout its lifecycle. We apply the principle of least privilege so that only authorized personnel and systems can access data, and only to the extent required to operate the Service.

Where applicable, AI models use platform activity—observable behavioral signals on the Service—to generate insights. We do not use sensitive personal information to train models. AI outputs are reviewed against our governance principles to promote consistency, fairness, and explainability. AI assists founders; it does not make decisions on their behalf.

We may share information with service providers and subprocessors who help us operate the Service, under contractual obligations of confidentiality and security. We may also disclose information where required by law, legal process, or to protect the rights, safety, or integrity of the Service and its users. We do not sell or rent customer data to any third party.

We retain customer data for as long as your account is active or as needed to provide the Service. Customers can request deletion of their information at any time. Upon such a request, and subject to legal and operational requirements, we will delete or anonymize your data in accordance with our retention practices.

We protect customer data using encryption in transit and at rest, strong authentication, granular access controls, audit logging, and continuous platform monitoring. Our security program is designed with SOC 2 readiness in mind as the platform scales. However, no system is perfectly secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below. We will respond in accordance with applicable law.

Bridge IR operates from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date and, for material changes, provide notice through the Service or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your data, contact us at tbolling@bridgeirco.com. We are committed to responding to privacy inquiries promptly and in good faith.