Privacy — Bridge AI

Who runs it

Bridge is run by Christy Robin, sole proprietor, trading as Pretiosus · 3rd floor, V970, Bldg No 60/44, JC Chambers, Panampilly Nagar Avenue, Panampilly Nagar, Kochi, Ernakulam, Kerala 682036, India · GSTIN 32BPCPV0220D1ZL · office@pretiosus.cc · +91 79077 25350. Questions: office@pretiosus.cc.

How it works

Bridge connects to your business's WhatsApp Business number through Meta's WhatsApp platform. Messages your customers send to that number pass through Meta and are stored in Bridge so your team can read and answer them. Your customers see your business's name, not Bridge.

What we store

• Staff accounts: name, email and a scrambled password.
• WhatsApp conversations, including the automatic menu replies.
• The client details your team records: name, phone number and notes.
• Deals, orders and amounts.
• Your WhatsApp connection credentials, stored encrypted.
• Your Instagram connection, automations and reply records, if you connect Instagram (see Instagram below).

We don't store medical or clinical records. The text of conversations closed as spam is deleted automatically after 14 days.

Instagram

Instagram is optional. A business can connect its Instagram professional account so that Bridge sends one private reply to people who comment on its posts, with a link the business chooses. The reply comes from the business's own account. The person who commented does not see Bridge.

When a business connects its account, we receive the account's ID and username, an access token (stored encrypted), and the list of permissions it granted.

What Bridge reads:

• The business's own recent posts, so it can choose the post an automation applies to. Their captions and pictures are shown, never stored.
• New comments on posts with an automation switched on, including replies to comments: each comment's ID, when it was made, and the commenter's Instagram ID and username. Never the text of the comment. Comments made before the automation was switched on, and the business's own comments, are not recorded.

What Bridge stores:

• Each automation: its name, its post and the post's link, its messages (up to three) and the link it sends.
• For each comment it handles, whether or not a reply is sent: the comment's ID, the post's ID, when the comment was made, the commenter's Instagram ID and username, and the status. When a reply is sent, it also stores which of the automation's messages was used, the link that was sent, Instagram's ID for the message and when it was sent. When a reply fails, it stores an error code.

Bridge does not read the business's Instagram inbox or the messages people send to it. It does not keep a copy of each message it sends, and it does not post, edit, hide or delete comments. It sends at most one private reply per person per post, within 7 days of the comment.

Each reply's text and link go to Meta, which delivers them through Instagram. The records are kept on the same server as the rest of Bridge. Nobody else receives them.

A business can disconnect its account at any time in Bridge under Settings → Instagram, or remove Bridge AI in Instagram's own settings (Apps and websites). Either one deletes the access token and switches every automation off. The account's ID and username, the automations and the reply records are kept, so the business can still see what was sent, until one of these happens:

• The account holder asks Instagram to have Bridge AI delete their data. Instagram tells us, and we delete the connection, the access token, every automation and the record of each private reply straight away. Instagram then shows a confirmation link to app.connectbridge.ai/instagram/deletion.
• The business asks us at office@pretiosus.cc, or its workspace is deleted.

Someone who commented on a business's post and wants their record removed can email office@pretiosus.cc with their Instagram username and the business's name. Copies in our backups are deleted within 30 days.

Signing in with Google or Microsoft

Signing in with Google or Microsoft is optional. If you use it, we receive your name, your email address and an account identifier from that company, and use them only to sign you in. Signing in this way does not let us read your mailbox, contacts or files.

Payments

If your workspace pays for Bridge, the payment is handled by a payment company (Razorpay in India). Your card or bank details go to them, never to us.

When a workspace is deleted, its records at the payment company are not deleted, because payment records must be kept for tax law. Its invoices are kept too, with the workspace's name and the payment company's payment ID, until the end of the keeping period our accountant confirms. Nothing else about the workspace or its people is kept with them.

Where it's kept

On a server rented from Contabo in the United States. It is backed up every night: backups are kept on that server for 14 days, and a copy is kept on our own computer in India for 30 days.

Who can see it

Your team, our team (only to run and support the service), and Meta as the WhatsApp and Instagram provider. Nobody else. No selling, no ads, and each business is kept separate in the database. Bridge does not send your customers' messages to any AI service.

Your customers' information

Your business decides what is kept about its customers. If someone asks to be removed, your team can erase that person's record in Bridge, or ask us to help.

Copies and deletion

Email office@pretiosus.cc for a full export of your business's data, or to delete it. On deletion, logins are locked and wiped and your WhatsApp number is disconnected from Bridge. Its Instagram connection, automations and reply records are deleted with it. Backup copies age out within 30 days.

For any complaint about how we handle personal data, contact our grievance officer, Christy Robin, at office@pretiosus.cc or +91 79077 25350. We reply within 7 days.

Changes

We'll update this page and its date.