Bridge

BRIDGE PRIVACY POLICY

Effective Date: October 1, 2026

Bridge is a brand operated by Simplora, Inc. This Privacy Policy describes how Simplora, Inc., doing business as Bridge (“Bridge,” “we,” “us,” or “our”), collects, uses, discloses, stores, and otherwise processes personal information in connection with Bridge.

This Privacy Policy applies to our websites, applications, video and audio meeting services, meeting intelligence features, workspaces, AI assistants and agents, integrations, APIs, Model Context Protocol services, and other products and services that link to this Privacy Policy, collectively, the “Services.”

The Services may be used by account holders, workspace members, meeting hosts, meeting participants, guests, customers, and individuals interacting with AI agents or shared Bridge content. If you use Bridge through an organization, your organization may control certain aspects of your account, meetings, content, retention, sharing, or access, as described further below.

1. Personal Information We Collect

The information we collect depends on how you interact with Bridge, which features you use, the settings selected by you or an applicable organization, and the third-party services you choose to connect.

1.A. Account and Profile Information

When you create or use a Bridge account, we may collect information such as your name, email address, profile photo, authentication information, job title, company or organization, workspace membership, account preferences, subscription information, and related settings.

We may receive this information directly from you, from your organization or workspace administrator, from an identity provider, or from another user who invites you to Bridge. We use this information to create and administer accounts, authenticate users, manage workspaces, facilitate collaboration, personalize the Services, provide support, maintain security, and process subscriptions and billing.

1.B. Meeting and Conversation Information

Bridge processes information associated with meetings and conversations. Depending on the meeting and the features enabled, this may include audio, video, meeting recordings, transcripts, captions, participant names and identifiers, meeting titles, dates, times, duration, attendance, chat messages, reactions, notes, questions, responses, links, shared materials, meeting context, speaker information, summaries, action items, decisions, generated insights, and other information communicated or generated during a meeting.

This information may originate from Bridge-hosted meetings, meeting hosts and participants, recordings or transcripts imported into Bridge, or supported third-party meeting services.

We process Meeting and Conversation Information to host and facilitate meetings, provide recording and transcription functionality, generate meeting intelligence, provide AI assistance, create meeting outputs, support search and recall, maintain meeting history, and power workflows and other features requested by users.

Because meetings are open-ended conversations, Meeting and Conversation Information may incidentally contain sensitive personal information depending on what participants choose to discuss or share. Bridge does not generally require participants to disclose sensitive personal information unless a specific feature expressly requests it.

1.C. Uploaded, Imported, and Shared Content

We may process documents, files, images, notes, existing recordings, transcripts, pasted text, imported meeting data, calendar information, contact information, links, and other content that you upload, import, paste, synchronize, share, or otherwise make available through the Services.

This may also include custom knowledge or context made available to an AI assistant or Agent. We use this information to provide meeting context, collaboration, search, knowledge retrieval, AI assistance, agent functionality, workflow automation, and other Services you request.

1.D. AI Assistant and Agent Information

When you use Bridge's artificial intelligence features or interact with an Agent, we may process prompts, questions, instructions, Agent configurations, Agent names and descriptions, custom context, knowledge sources, tool permissions, Connected Service permissions, AI responses, tool calls, tool results, requested actions, completed or failed actions, Agent interaction history, and information used to determine whether an Agent is authorized to retrieve information or perform an action.

This information may come from you, other people interacting with an Agent, meeting participants, your organization, Meeting and Conversation Information, Connected Services, and other sources that have been authorized for use by the applicable Agent.

We use this information to provide AI functionality, respond to user requests, retrieve relevant context, operate Agents, perform authorized actions, manage permissions, maintain security, and improve the reliability and performance of user-facing AI features.

1.E. Connected Service Information

If you connect Bridge to another application, platform, or service, we may receive information that you authorize through that connection. Depending on the Connected Service and the permissions you grant, this may include information from calendar services, email and productivity platforms, contact services, document systems, customer relationship management systems, cloud storage services, communication platforms, AI services, video platforms, and other third-party applications.

We may also receive OAuth tokens or similar authorization credentials that allow Bridge to interact with a Connected Service on your behalf. Where supported, Bridge uses authorization mechanisms such as OAuth rather than requesting or storing your third-party password.

We use Connected Service Information to provide integrations, retrieve context, synchronize information, create or update information at your direction, support Agent Actions, and provide other features that depend on the applicable integration.

1.F. Public and Professional Information

Certain Bridge features may retrieve publicly available or professionally relevant information about participants, companies, topics, or other subjects. This may include names, job titles, company information, public professional profile information, and publicly available web content.

We may obtain this information from publicly accessible websites, third-party data services, or information provided by users. We use it for purposes such as meeting preparation, participant context, search, research, and other user-requested AI functionality.

1.G. Communications With Bridge

If you communicate with Bridge, we may collect support requests, emails, feedback, survey responses, product-research communications, bug reports, sales communications, and related information.

We use these communications to provide support, troubleshoot problems, improve the Services, conduct product research, administer customer relationships, and communicate with you.

1.H. Payment and Transaction Information

If you purchase a paid Service, Bridge or its payment providers may process billing information, subscription information, transaction history, payment status, billing address, and limited payment-method information.

Full payment-card information may be processed directly by our payment processor rather than stored by Bridge.

1.I. Usage, Device, and Technical Information

When you use Bridge, we may automatically collect information such as IP address, browser type, device type, operating system, session information, logs, feature interactions, meeting quality metrics, performance information, crash data, diagnostic information, authentication events, security events, referring pages, and approximate location derived from an IP address.

We use this information to operate, secure, troubleshoot, analyze, and improve the Services.

1.J. Cookies and Similar Technologies

We may use cookies and similar technologies to authenticate users, maintain sessions, protect account security, remember preferences, understand usage, measure performance, and prevent fraud or abuse.

Where required by applicable law, we provide choices regarding non-essential cookies or similar technologies.

2. How We Use Personal Information

We use personal information to provide, operate, maintain, secure, and improve Bridge. This includes creating and managing accounts, authenticating users, hosting meetings, facilitating communication, recording and transcribing meetings where enabled, generating summaries and other meeting outputs, providing real-time AI assistance, operating Agents, retrieving authorized information, performing authorized Agent Actions, enabling search across meeting history, maintaining persistent meeting context, organizing conversation data, importing meetings, operating integrations, synchronizing information with Connected Services, automating workflows, and providing APIs and MCP functionality.

We also use personal information to personalize the Services, process subscriptions, provide customer support, monitor system performance, detect and prevent fraud or unauthorized access, investigate abuse, enforce our Terms of Service, comply with law, protect our legal rights and the rights of others, and develop and improve user-facing features.

We may use aggregated or de-identified information for analytics, research, operational planning, and product development where that information cannot reasonably be used to identify an individual.

3. Artificial Intelligence and Model Processing

Bridge uses artificial intelligence and automated systems to provide functionality such as transcription, summarization, search, retrieval, meeting assistance, recommendations, content generation, Agents, workflow automation, and cross-meeting analysis.

Information submitted to AI functionality may be processed by Bridge and by third-party infrastructure or AI providers acting on our behalf.

Bridge does not use Meeting and Conversation Information or Connected Service Information to train generalized artificial intelligence models for use across unrelated customers unless you expressly opt in to that use and the use is permitted by applicable law and applicable third-party platform requirements.

Bridge does not authorize service providers acting on its behalf to use personal information provided through Bridge for their own independent advertising purposes. Where third-party API policies impose additional restrictions, including restrictions applicable to certain Google Workspace API data, Bridge processes that information subject to those restrictions.

Artificial intelligence can produce incorrect, incomplete, or misleading results. Users should independently review information and actions where accuracy or consequences are important.

4. Sensitive Personal Information

Meeting conversations and uploaded content may contain information considered sensitive under applicable privacy laws. Depending on the content users choose to provide, this may include information concerning health, finances, racial or ethnic origin, religious beliefs, sexual orientation, precise location, account credentials, or other sensitive matters.

Bridge may process sensitive information when a user or participant voluntarily provides it through the Services, when processing is necessary to provide a requested feature, when an organization directs Bridge to process it, when legally required consent has been provided, or where applicable law otherwise permits processing.

Bridge does not use sensitive personal information to infer characteristics about individuals for advertising purposes.

Users should avoid sharing sensitive information with an Agent, meeting, workspace, or Connected Service unless they are authorized to do so and the information is appropriate for the intended use.

5. How We Disclose Personal Information

We may disclose personal information to service providers and subprocessors that help us operate Bridge. These may include providers of cloud infrastructure, data storage, audio and video infrastructure, recording, transcription, artificial intelligence, authentication, email delivery, analytics, logging, monitoring, customer support, security, and payment processing. These providers may process information on our behalf subject to contractual or other applicable restrictions.

Information communicated during a meeting may also be visible or available to other meeting participants. Depending on the meeting and features enabled, participants may receive or access names, profile information, audio, video, chat messages, reactions, shared content, recordings, transcripts, or generated meeting outputs.

Information may also be available to workspace members, administrators, owners, or other authorized users according to the permissions applicable to a particular resource. Workspace membership alone does not necessarily provide access to every meeting or resource in a workspace.

If an Agent Owner makes an Agent available to other people, those people may interact with the Agent according to its configuration. The Agent may process information and use tools according to the permissions established by the Agent Owner and applicable Bridge controls.

If you direct Bridge or an authorized Agent to perform an action through a Connected Service, Bridge may transmit information reasonably necessary to perform that action.

We also disclose information when users intentionally share meetings, recordings, transcripts, Agents, workspace resources, documents, links, or other content with other people. Recipients may use information according to their own rights and obligations, and Bridge cannot control independent copies they create or retain.

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law or lawful legal process, respond to governmental requests, enforce our agreements, investigate fraud or abuse, address security threats, or protect the rights, property, or safety of Bridge, our users, or others.

Information may also be disclosed in connection with an actual or proposed financing, merger, acquisition, restructuring, bankruptcy, sale of assets, or similar corporate transaction. Any successor's use of personal information remains subject to applicable law and contractual obligations.

6. Sale, Sharing, and Targeted Advertising

Bridge does not sell personal information for monetary consideration.

Bridge does not share personal information for cross-context behavioral advertising as that term is defined under California privacy law, and we do not use personal information obtained through the Services to build advertising profiles for third parties.

If these practices materially change, we will update this Privacy Policy and provide any notices or choices required by applicable law before implementing the new practice.

7. Profiling and Automated Decision-Making

Bridge uses artificial intelligence to assist users with meetings, information, content, and workflows. Bridge does not currently use personal information to make solely automated decisions on behalf of Bridge that produce legal or similarly significant effects concerning individuals, such as independent decisions regarding employment, credit, housing, insurance, or access to essential services.

Customers and users may choose to consider Bridge-generated information in their own decision-making. Those customers and users remain responsible for ensuring that their use complies with applicable law.

8. Organizations and Customer-Controlled Data

Bridge may process personal information on behalf of businesses and other organizations.

Where an organization determines the purposes and means of processing particular Customer Content and Bridge processes that information on its behalf, the organization may act as the controller or business and Bridge may act as its processor or service provider, as those concepts are defined under applicable law.

Organizations may have the ability to add or remove members, manage workspaces, configure account settings, establish retention rules, manage sharing, control integrations, administer subscriptions, configure security settings, establish Agent permissions, and access organization-controlled resources according to applicable permissions.

If you use Bridge through an organization, questions concerning that organization's independent privacy practices should generally be directed to the organization.

Bridge may separately process account, billing, security, product, and technical information for its own purposes as described in this Privacy Policy.

9. Workspaces, Ownership, and Access

Bridge may support both personal and organization-controlled workspaces. Access to content depends on resource-level permissions, workspace settings, sharing decisions, ownership rules, and organization configuration.

Joining a workspace does not automatically make all content created by a user accessible to every workspace member or administrator.

A user's removal from a workspace may affect the user's access to workspace resources. An organization's ability to retain, transfer, administer, or access resources may depend on the type of workspace, the user's relationship with the organization, ownership of the applicable resource, sharing settings, product functionality, applicable law, and the organization's agreement with Bridge.

Bridge may provide administrative functionality allowing authorized organizations to transfer or preserve organization-controlled resources when a member leaves. Where a separate enterprise or customer agreement governs ownership, access, or control, that agreement controls.

10. Agent Permissions and Agent Interactions

For purposes of this Privacy Policy, an “Agent Owner” means the person or organization that creates, configures, deploys, or controls an Agent. An “Agent User” means a person permitted to interact with an Agent. An “Agent Action” means an action performed or attempted through an Agent, including an action involving a Connected Service.

When an Agent Owner makes an Agent available in a meeting or otherwise provides access to another person, Agent Users may interact with that Agent according to its permissions.

Depending on its configuration, an Agent may retrieve information, search authorized sources, use meeting context, access authorized Connected Service information, create or modify content, send information to another system, initiate workflows, or perform other authorized actions.

Agent interactions may be recorded in activity, audit, or security logs. Agent Owners are responsible for selecting permissions appropriate for the people who may interact with their Agents.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this Privacy Policy. The applicable retention period depends on factors such as the type of information, user and organization settings, the applicable subscription plan, whether a meeting or resource remains active, security requirements, contractual obligations, legal requirements, backup schedules, and applicable third-party platform rules.

Account information may generally be retained while an account is active and for a reasonable period afterward for administrative, legal, fraud-prevention, security, or operational purposes.

Meeting Content may generally be retained until it is deleted by an authorized user, subject to organization settings, plan functionality, backup systems, legal obligations, and other applicable retention controls.

Security, technical, and diagnostic logs may be retained for a reasonable period necessary to maintain security, prevent fraud, investigate incidents, and operate the Services.

Information that has been deleted from active systems may temporarily remain in backups until those backups are overwritten or expire according to our backup procedures.

We may retain information for longer periods where reasonably necessary to comply with law, enforce agreements, preserve evidence, establish or defend legal claims, respond to disputes, or protect the Services and our users.

12. Deletion

Users may be able to delete meetings, content, Agents, integrations, or Accounts through available Bridge controls. Privacy and deletion requests may also be submitted to help@meetonbridge.com.

Deletion may be subject to legal exceptions, organization-controlled retention, contractual obligations, security and fraud-prevention records, backup cycles, information independently owned or retained by another user, and applicable third-party platform requirements.

Deleting information from Bridge does not necessarily delete copies that were previously shared with or independently retained by other users or third-party services.

13. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

Depending on the system involved, these safeguards may include encryption in transit and at rest, authentication controls, role-based or other access controls, logging, monitoring, vendor security controls, security reviews, environment separation, and incident-response procedures.

No electronic system is completely secure, and Bridge cannot guarantee absolute security.

If you believe your account or information has been compromised, contact us at help@meetonbridge.com.

14. Your Privacy Rights

Depending on where you reside and which laws apply to Bridge's processing, you may have rights concerning your personal information. These rights may include confirming whether we process your information, accessing information, obtaining a copy, correcting inaccurate information, requesting deletion, obtaining certain information in a portable format, withdrawing consent where processing depends on consent, opting out of certain processing, appealing a denied privacy request, and exercising privacy rights without unlawful discrimination.

These rights may be subject to exceptions and limitations under applicable law.

You may submit a request by contacting help@meetonbridge.com or by using privacy controls Bridge may make available through the Services. We may need to verify your identity before completing certain requests.

Where applicable law permits an authorized agent to exercise rights on your behalf, Bridge may request evidence that the agent has authority to make the request.

15. U.S. State Privacy Rights

Certain U.S. state privacy laws provide additional rights where the applicable law covers Bridge's processing.

Depending on your state, these rights may include rights of access, confirmation of processing, correction, deletion, portability, opt-out from certain sales, targeted advertising or profiling, rights concerning sensitive data, the right to appeal certain denied requests, and the right not to receive unlawful discriminatory treatment for exercising privacy rights.

Bridge does not currently sell personal information or process personal information for cross-context behavioral advertising.

15.A. California Residents

To the extent the California Consumer Privacy Act, as amended, applies to Bridge, California residents may have rights to know categories and specific pieces of personal information collected about them, understand the categories of sources and purposes for processing, learn the categories of third parties to whom information is disclosed, request deletion or correction, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and exercise their rights without unlawful discrimination.

Bridge does not sell personal information and does not share personal information for cross-context behavioral advertising.

15.B. Appeals

Where applicable law provides a right to appeal our denial of a privacy request, you may submit an appeal by replying to our decision or contacting help@meetonbridge.com and stating that you are appealing a privacy request decision.

We will respond within the period required by applicable law. Where applicable law requires information about contacting a state regulator following denial of an appeal, we will provide that information with our decision.

15.C. Universal Opt-Out Signals

Where Bridge is legally required to recognize a browser-based universal opt-out preference signal, such as Global Privacy Control, Bridge will process supported signals as required by applicable law.

Because Bridge does not currently sell personal information or use it for targeted advertising, receipt of such a signal generally will not change those practices.

16. International Users and Transfers

Bridge is operated by Simplora, Inc. in the United States. Personal information may be processed in the United States and in other countries where Bridge or its service providers operate.

Privacy laws in those jurisdictions may differ from the laws where you live. Where applicable law requires safeguards for international transfers, Bridge will use legally recognized mechanisms as appropriate.

Where applicable law requires a legal basis for processing personal information, the applicable basis may include performance of a contract, provision of requested Services, Bridge's legitimate interests in areas such as security, fraud prevention, service operation and improvement, consent, compliance with legal obligations, or protection of legal rights.

The precise basis depends on the information, purpose, and law applicable to the processing.

17. Meeting Recording, Transcription, and Consent

Bridge may allow users to record meetings, transcribe conversations, generate captions, analyze conversations, create AI-generated outputs, and store meeting information.

Recording, monitoring, and interception laws vary by jurisdiction.

Meeting hosts and users who enable recording or transcription are responsible for providing legally required notices, obtaining legally required consents, confirming they have authority to process the applicable meeting, and using recordings and transcripts lawfully.

Bridge may provide recording indicators, transcription indicators, participant notices, consent-related interfaces, or meeting controls intended to support lawful use. These tools may not independently satisfy every legal requirement that applies to every user or jurisdiction.

If another user or organization hosts a meeting, that person or organization may independently determine how the resulting Meeting Content is used.

18. Google API Services and Google Workspace Data

Bridge may allow users to connect Google Workspace services, including Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, and other supported Google services.

When you authorize a Google Workspace integration, Bridge may access, use, store, and transmit Google user data according to the permissions you grant and the features you choose to use. Depending on the integration, this may include calendar events and attendees, email content and metadata, contacts, files, documents, spreadsheets, and related Workspace information.

Bridge uses Google Workspace data only to provide user-facing functionality that you request or authorize. This may include connecting meetings with calendar events, preparing for meetings, identifying and enriching meeting participants, surfacing relevant context, retrieving information, creating or updating Workspace content, and enabling authorized AI assistants, Agents, or workflows.

Bridge may supplement Google Workspace information with information from other authorized or publicly available sources to provide participant enrichment and related meeting context within Bridge.

Bridge may also offer a Google Calendar Add-On that allows users to access Bridge functionality directly from Google Calendar. Depending on the permissions you grant, the Add-On may access information associated with calendar events, including event details, attendees, descriptions, locations, and conferencing information, and may use or update that information to provide features such as creating or connecting Bridge meetings, displaying meeting information, preparing users for meetings, enriching participant context, or performing other actions you request.

Bridge does not sell Google Workspace user data or use it for advertising, retargeting, advertising profiles, creditworthiness determinations, or generalized AI model training except to the extent expressly permitted by applicable Google policies.

Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and applicable Google Workspace developer policies.

You may revoke Bridge's access to Google Workspace services through your Google Account settings, disconnect supported Google integrations through Bridge, or uninstall the Bridge Google Calendar Add-On through Google Workspace. Revoking, disconnecting, or uninstalling an integration prevents future access through that authorization, subject to applicable retention, legal, and third-party platform requirements.

19. YouTube API Services

Certain Bridge features may use YouTube API Services.

By using features that access YouTube API Services, you acknowledge that those features are also subject to the YouTube Terms of Service available at:

https://www.youtube.com/t/terms

Google's Privacy Policy is available at:

https://policies.google.com/privacy

Bridge's privacy practices concerning information received through YouTube API Services are described in this Privacy Policy.

Where Bridge accesses Authorized Data through YouTube API Services, users may revoke authorization through applicable Bridge controls or Google security settings. Bridge will revoke applicable authorization tokens and delete Authorized Data following revocation where required by applicable YouTube API policies.

A user may also request deletion of stored YouTube-related user data. Information subject to a valid deletion request will be deleted as soon as reasonably possible and within seven calendar days where required by YouTube API policies.

Deleting YouTube-related information stored by Bridge does not delete the underlying information maintained independently by YouTube.

20. Third-Party Services

Bridge may integrate with, link to, or exchange information with third-party services.

Those services operate under their own terms, privacy policies, and security practices. Bridge is not responsible for the independent privacy practices of third-party services.

Information sent to a third-party service at your request may subsequently be processed by that service according to its own policies.

21. Children's Privacy

Bridge is intended primarily for professional and business use.

Individuals under 18 may not create a personal Bridge account unless Bridge expressly permits such use or the account is made available through an organization authorized to provide the Services to that individual in compliance with applicable law.

The Services are not directed to children under 13. We do not knowingly collect personal information directly from children under 13 in circumstances governed by the Children's Online Privacy Protection Act without legally valid authorization.

If we learn that personal information has been collected from a child in violation of applicable law, we will take appropriate steps to delete it.

Parents or guardians who believe a child has improperly provided information to Bridge may contact help@meetonbridge.com.

22. Communications

We may send transactional emails, security notices, meeting-related notifications, product notices, billing communications, service announcements, and other communications necessary to administer your account and the Services.

Where permitted by law, we may also send marketing communications. You may unsubscribe from marketing emails using the unsubscribe mechanism included in those communications.

Unsubscribing from marketing communications does not prevent Bridge from sending transactional, security, billing, or other administrative messages necessary to provide the Services.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our Services, technology, vendors, data practices, legal obligations, or business operations.

If a change materially affects how we process personal information, we may provide additional notice where appropriate or legally required. Where applicable law requires consent for a materially new use of personal information, Bridge will obtain the required consent before beginning that processing.

The Effective Date at the beginning of this Privacy Policy identifies when it was most recently updated.

24. Contact Us

For questions, privacy requests, complaints, or concerns regarding this Privacy Policy or Bridge's privacy practices, contact:

Bridge
Operated by Simplora, Inc.
Email: help@meetonbridge.com

Additional privacy-request methods may be provided through the Bridge website or application as they become available.