Privacy Policy

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

3.1 To Provide and Maintain Our Services

• Create and manage your account
• Verify your identity and eligibility to use our Services
• Facilitate transactions between buyers and sellers
• Process payments and manage BridgeBook Credits
• Deliver digital products you purchase
• Provide customer support and respond to inquiries
• Facilitate communication between parties in a transaction

3.2 To Improve and Develop Our Services

• Analyze usage patterns and trends
• Develop new products, services, and features
• Conduct research and analysis
• Test and troubleshoot new features

3.3 To Communicate With You

• Send transactional emails and notifications about your account or transactions
• Send marketing communications about products, services, and promotions (with your consent where required)
• Send SMS messages for transaction updates and marketing (with your consent)
• Respond to your comments, questions, and requests

SMS Consent Privacy: Your SMS consent is never shared with third parties. We do not sell, trade, or share your phone number or SMS preferences with any external organizations, advertisers, or partners. SMS communication is managed exclusively by BridgeBook and our SMS service provider, Twilio, solely to deliver communications you have explicitly consented to receive.

3.4 For Safety, Security, and Legal Compliance

• Detect, prevent, and address fraud, security breaches, and illegal activities
• Enforce our Terms of Service and other agreements
• Comply with legal obligations and respond to legal requests
• Protect the rights, property, and safety of BridgeBook, our users, and the public

3.5 For Advertising and Marketing

• Deliver targeted advertising based on your interests
• Measure the effectiveness of our advertising campaigns
• Provide personalized content and recommendations

4. LEGAL BASES FOR PROCESSING (EEA/UK USERS)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

Contractual Necessity: Processing necessary to perform our contract with you or to take steps at your request before entering into a contract. This includes creating your account, processing transactions, and providing our Services.

Consent: Where you have given explicit consent to the processing. This includes marketing communications, SMS messages, and certain uses of cookies and tracking technologies. You may withdraw consent at any time.

Legitimate Interests: Processing necessary for our legitimate interests or those of a third party, where such interests are not overridden by your rights. This includes fraud prevention, security, improving our Services, and certain analytics.

Legal Obligation: Processing necessary to comply with legal obligations, such as tax reporting, anti-money laundering requirements, and responding to legal requests.

5. HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

5.1 With Other Users

To facilitate transactions, we share certain information between buyers and sellers. Sellers may receive buyer contact information and qualification details. Buyers may receive seller business information and financials after executing an NDA. Both parties will have access to transaction-related documents and communications.

5.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, including:

These service providers are contractually obligated to protect your information and may only use it for the purposes for which it was disclosed.

5.3 For Legal and Safety Reasons

We may disclose your information when we believe it is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of BridgeBook, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

5.4 Business Transfers

If BridgeBook is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5.5 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

When the retention period expires, we will securely delete or anonymize your personal information, unless a longer retention period is required by law or for legitimate business purposes.

7. INTERNATIONAL DATA TRANSFERS

BridgeBook is headquartered in the United States, and our servers and service providers are located primarily in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws that may differ from U.S. laws, we will take appropriate safeguards to ensure that your personal data receives an adequate level of protection. These safeguards may include:

• Standard Contractual Clauses approved by the European Commission
• Binding corporate rules
• Your explicit consent to the transfer

By using our Services, you consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to collect and use information about you and your interaction with our Services. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

8.1 Types of Cookies We Use

Essential Cookies: These cookies are necessary for the Platform to function properly. They enable core functionality such as security, authentication, and accessibility. You cannot opt out of these cookies.

Analytics Cookies: We use PostHog, a product analytics service, to understand how visitors interact with our Platform. These technologies help us analyze traffic patterns, measure how our valuation tools are used, identify popular content, and improve our Services. If you submit your contact information through the Platform, analytics activity may be associated with that contact information so we can serve you better. On our valuation calculator pages, PostHog also records how you use the page, such as scrolling and clicks, so we can make it easier to use. What you type is hidden in these recordings, and they're deleted after 30 days. We don't record other pages.

Advertising Cookies: We use cookies from Google Ads and Facebook/Meta to deliver targeted advertising and measure the effectiveness of our advertising campaigns. These cookies may track your activity across different websites.

Functional Cookies: These cookies remember your preferences and settings to provide a more personalized experience.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may affect the functionality of our Services.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

You can manage your advertising preferences through the following links:

• Google Ads Settings
• Facebook Ad Preferences
• Digital Advertising Alliance Opt-Out

8.3 Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activity tracked. Our Platform does not currently respond to "Do Not Track" signals because there is no industry standard for how to interpret such signals.

9. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

9.1 Rights for All Users

Access: Request a copy of the personal information we hold about you.

Correction: Request that we correct inaccurate or incomplete personal information.

Deletion: Request that we delete your personal information, subject to certain exceptions.

Opt-Out of Marketing: Unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us.

Opt-Out of SMS: Reply STOP to any SMS message or contact us to opt out.

9.2 Additional Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the GDPR:

Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.

Restriction: Request that we restrict processing of your personal data in certain circumstances.

Objection: Object to processing based on legitimate interests or for direct marketing purposes.

Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Lodge a Complaint: File a complaint with your local data protection authority.

9.3 Additional Rights for California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.

Right to Delete: Request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out of Sale: Opt out of the "sale" of your personal information. BridgeBook does not sell personal information for monetary consideration. However, to the extent that sharing data with advertising partners constitutes a "sale" under the CCPA, you may opt out by contacting us.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information Collected: In the past 12 months, we have collected the following categories of personal information as defined by the CCPA: Identifiers (name, email, phone, IP address); Personal Information under Cal. Civ. Code § 1798.80(e) (name, address, phone, financial information); Commercial Information (purchase history, transaction records); Internet or Network Activity (browsing history, interactions with our Services); Geolocation Data (approximate location from IP address); and Professional Information (business ownership, company details).

9.4 Rights for UAE Residents

If you are located in the United Arab Emirates, you have rights under the UAE Personal Data Protection Law (PDPL), including the right to access, correct, and delete your personal data, and the right to object to certain processing activities. We process your data in accordance with the requirements of the PDPL.

9.5 Exercising Your Rights

To exercise any of your privacy rights, please contact us at privacy@bridgebook.io or using the contact information provided in Section 14. We will respond to your request within the timeframe required by applicable law (generally within 30 days). We may need to verify your identity before processing your request.

You may designate an authorized agent to make a request on your behalf. To do so, you must provide written authorization or a power of attorney, and we may require you to verify your identity directly with us.

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting employee access to personal information
• Regular security assessments and monitoring
• Secure cloud infrastructure hosted on Amazon Web Services (AWS)
• PCI-compliant payment processing through Stripe

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

If we become aware of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities as required by law.

11. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@bridgebook.io. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

12. THIRD-PARTY LINKS AND SERVICES

Our Platform may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Platform. We are not responsible for the privacy practices or content of third-party websites.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Effective Date" at the top of this Privacy Policy
• Notify you by email or through a notice on our Platform
• Where required by law, obtain your consent to the changes

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Exit Edge LLC Series 3 DBA BridgeBook
Email: privacy@bridgebook.io
Website: bridgebook.io

For GDPR-related inquiries, you may also contact our Data Protection Officer at: dpo@bridgebook.io

If you are located in the EEA and are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority.