Privacy Policy - Bridge Bot AI | Data Protection & Security

1. Information We Collect

Bridge Bot AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Bridge Bot MCP integration for monday.com and Slack.

1.1 Information You Provide

Account information when you install Bridge Bot MCP (email addresses, user IDs)
monday.com workspace data that you authorize us to access (boards, items, columns, users)
Slack workspace data that you authorize us to access (channels, messages, user information)
Authentication tokens for monday.com and Slack API access
Communication preferences and settings
Support requests and feedback
Approval request data for task creation, updates, and deletions

1.2 Automatically Collected Information

API request logs for operational monitoring and debugging
Performance metrics and error logs for service improvement
Device and browser information for compatibility
IP addresses for security and fraud prevention
Usage analytics for feature improvement (non-personalized)

1.3 Third-Party Integrations

Our application integrates with the following services:

Bridge Bot API: For core logic processing, MCP client, security and token management
monday.com API: For core application functionality and workspace data access
Slack API: For communication and notification features
AWS Cloud Services: For secure hosting and data storage
AI Services (ChatGPT and Claude): For natural language processing capabilities

2. How We Use Your Information

We use the information we collect to:

Provide and maintain the Bridge Bot MCP service
Process and fulfill your requests for task creation, updates, and deletions
Manage approval workflows and track request status
Send notifications and updates through Slack
Analyze usage patterns to improve our products and services
Provide customer support and troubleshoot issues
Send important updates and notifications
Ensure security and prevent fraud
Comply with legal obligations

2.1 AI Services Usage

We integrate with AI services (ChatGPT and Claude) for natural language processing capabilities. These services:

Do not store user data permanently
Do not use your data for training purposes
Process data only for the specific functionality requested
Do not retain conversations or user inputs beyond the immediate processing
Are used solely for understanding user intent and generating appropriate responses

3. Data Retention Policy

Bridge Bot AI will retain Customer Data in accordance with the following schedule:

User account data: Retained while the user has an active account
API request logs: Retained for 30 days for operational purposes
Approval request data: Retained for 90 days for audit purposes
Slack integration tokens: Retained until user uninstalls the app
monday.com authentication tokens: Retained until user revokes access
Error logs and performance metrics: Retained for 90 days for service improvement

4. Data Retention and Deletion

4.1 Automatic Data Deletion

When you de-authorize, deactivate, uninstall, or otherwise terminate our monday.com app, we automatically schedule the permanent deletion of all your personal data within 10 days. This includes:

User accounts and profile information
monday.com authentication tokens and credentials
Slack integration data and settings
Approval requests and workflow data
API request logs and usage data
Team data and associations

4.2 Preserved Data

For audit and analytics purposes, we preserve:

Query logs and analytics data (anonymized and aggregated)
System logs for security and compliance monitoring

4.3 Express Consent for Extended Retention

If you wish to retain your data longer than 10 days after app termination, you must provide explicit written consent. Contact us at support@bridgebotai.com with your specific retention requirements.

4.4 Data Deletion Process

Immediate Actions: Upon app uninstall, your account is downgraded to free plan
Scheduled Deletion: All personal data is automatically scheduled for deletion within 10 days
Complete Removal: All personal data is permanently deleted from our systems
Audit Trail: We maintain logs of deletion activities for compliance purposes

4.5 Your Rights

You have the right to:

Request immediate deletion of your data
Request a copy of your data before deletion
Request information about what data we hold about you
Withdraw consent for extended data retention at any time

Contact us at support@bridgebotai.com for any data-related requests.

5. Data Storage Policy

Bridge Bot AI will store Customer Data in accordance with the following:

Secure Infrastructure: Data is stored in secure PostgreSQL databases hosted on AWS infrastructure
Encryption at Rest: All data is encrypted at rest using AES-256 encryption
Encryption in Transit: All API communications are encrypted in transit using TLS 1.2+
Token Security: Access tokens are stored securely and encrypted in the database
No Plain Text Storage: No sensitive data is logged or stored in plain text
Compliance: Data is stored in compliance with GDPR and CCPA requirements
Geographic Location: All data is stored in the United States (AWS us-east-1 region)

6. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

6.1 Core Service Providers

We share data only with the following services as required for core application functionality:

monday.com: For workspace data access and integration features
Slack: For communication and notification features
AWS Cloud Services: For secure hosting and data storage

6.2 AI Services

We integrate with AI services (ChatGPT and Claude) for natural language processing. These services do not store user data or use it for training purposes. Data is processed only for immediate functionality and not retained.

6.3 No Analytics or Tracking

We do not use analytics, advertising, or tracking services. We do not collect or share data for marketing or analytics purposes.

6.4 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.

7. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest using industry-standard protocols
Regular security assessments and updates
Access controls and authentication measures
Secure data centers and infrastructure
Regular backup procedures with encrypted backups
Employee training on data protection and security
Incident response procedures for security breaches

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request a copy of your data in a portable format
Objection: Object to certain processing activities
Withdrawal of Consent: Withdraw consent for data processing

To exercise these rights, please contact us at privacy@bridgebotai.com. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use minimal cookies only for essential functionality and security purposes. We do not use tracking cookies, analytics cookies, or advertising cookies. You can control cookie settings through your browser preferences.

10. Third-Party Services

Our service integrates with monday.com, Slack, AWS Cloud Services, and AI services (ChatGPT and Claude). These services have their own privacy policies, and we encourage you to review them. We only share data with these services as required for core application functionality.

11. International Data Transfers

All data is stored and processed in the United States using AWS Cloud Services in the us-east-1 region. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through our service.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@bridgebotai.com
Support: support@bridgebotai.com
Company: Bridge Bot AI