Privacy Policy

1. Introduction

BridgeFlow ("we," "our," or "us") is an AI automation agency committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bridgeflow.agency, use our services, or interact with us in any way. By accessing or using our services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide

• Contact Information: Name, email address, phone number, and company name when you fill out forms, subscribe to our newsletter, or contact us.
• Business Information: Website URL, industry, business size, and operational details provided during consultations or audit requests.
• Account Credentials: Third-party platform credentials (e.g., n8n, GoHighLevel, CRM tools) shared with us to perform automation work. These are stored securely and used solely for service delivery.
• Payment Information: Billing details processed through our secure payment providers. We do not store credit card numbers on our servers.
• Career Applications: Resumes, portfolio links, and career-related information submitted through our careers page.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, scroll depth, click events, referral source, and navigation patterns.
• Device Information: Browser type, operating system, screen resolution, and device type.
• IP Address: Used for approximate geolocation and security purposes. We do not use IP addresses to personally identify you.

3. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the website to function properly (e.g., session management, authentication).
• Analytics Cookies: Help us understand how visitors interact with our website. We use a custom telemetry system to track anonymized page views and user interactions.
• Functional Cookies: Remember your preferences, such as theme settings and form inputs.

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features.

4. How We Use Your Information

• To provide, maintain, and improve our automation services
• To communicate with you about projects, proposals, and service updates
• To send you marketing communications, newsletters, and product updates (with your consent)
• To respond to inquiries, support requests, and feedback
• To analyze website usage and improve the user experience
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms of service
• To process career applications and evaluate candidates

5. Third-Party Tools and Services

We integrate with and use the following third-party services in delivering our work:

• Supabase: Database hosting and authentication.
• Vercel: Website hosting and deployment.
• n8n: Workflow automation platform used for building client automations.
• GoHighLevel: CRM and marketing automation platform.
• OpenAI / Anthropic: AI model providers used within automation workflows.
• Stripe: Payment processing (when applicable).

Each of these providers has their own privacy policies. We encourage you to review them. We do not sell, rent, or trade your personal information to any third party.

6. Data Security

We implement industry-standard security measures to protect your information, including: encryption in transit (TLS 1.3), encryption at rest (AES-256), role-based access control, regular security audits, and secure credential management. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Contact form submissions are retained for 24 months. Newsletter subscriptions remain active until you unsubscribe. Client project data is retained for the duration of the engagement plus 12 months.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a copy of your data in a machine-readable format.
• Opt-Out: Unsubscribe from marketing communications at any time.
• Restrict Processing: Request that we limit the processing of your data.

To exercise any of these rights, please contact us at the email below. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.