top of page

Privacy Policy

Last Updated: November 2025

Bridge Social, Inc. (Bridge, we, us, our) provides communication tools for aging-service organizations and related programs. This Privacy Policy explains how Bridge collects and uses information from:

​​

  • Visitors to Bridge webpages

  • Users of the Bridge platform

  • Individuals who interact with forms, landing pages, or referral pages

  • Metadata processed on behalf of Customers

 

This Policy does not apply to information shared directly with a Customer through the Customer’s phone number or systems. Those interactions are governed by the Customer’s privacy practices.

1. Information We Collect

1.1 Information You Provide

This includes:

  • Account and profile information

  • Data submitted through contact forms

  • Preferences entered in the Bridge platform

  • Communications sent to Bridge support

 

Bridge does not intentionally collect PHI on public landing pages.

1.2 Information Collected Automatically

We collect:

  • IP addresses

  • Device and browser information

  • Page views and navigation data

  • Basic analytics

  • Referral link clicks

  • Cookies that support functionality and site performance

1.3 Information Processed for Customers

Bridge processes:

  • Message content

  • Message metadata

  • Timestamps and delivery status

  • Data submitted through agency programs using Bridge

Customers control this information. Bridge acts as a service provider or Business Associate.

2. How Information Is Used

Bridge uses information to:

  • Operate and improve the Services

  • Deliver automated responses

  • Support agency reporting

  • Authenticate users

  • Monitor and secure systems

  • Comply with legal requirements

​

Bridge does not sell personal information or use Customer data for advertising. Bridge does not use Customer data to train public AI models.

3. Sharing of Information

3.1 With Customers

Bridge shares message content and related metadata with the Customer that owns the communication channel.

3.2 With Subprocessors

Bridge uses subprocessors, including:

  • Cloud hosting providers

  • HIPAA-enabled SMS processors

  • Security tools​

Bridge executes BAAs with subprocessors when required.

3.3 Legal Requirements

Bridge may share data if required by law.

3.4 With Consent

Bridge may share information if an individual provides explicit consent for a specific use.

4. PHI Handling

If a Customer uses Bridge for PHI:

  • Bridge processes PHI strictly under Customer instruction

  • PHI is not collected on landing pages

  • PHI is covered under the Bridge HIPAA Policy

  • PHI is never used for model training or marketing

5. Cookies and Analytics

Cookies are used for:

  • Site performance

  • Navigation improvement

  • Basic analytics

We do not use advertising cookies.

6. Data Security

Bridge maintains security measures including:

  • Encryption

  • Access controls

  • Secure infrastructure

  • Logging and monitoring

7. Data Retention

Data is retained according to Customer requirements and applicable laws.

8. User Rights

Depending on jurisdiction, users may request:

  • Access to their information

  • Correction of data

  • Deletion when allowed

Users can opt out of messages by replying STOP.

9. Children’s Privacy

Bridge does not knowingly collect data from children under 13.

10. Customer Responsibilities

Customers must:

  • Provide appropriate privacy notices

  • Obtain consent when needed

  • Follow laws governing their programs

11. Changes to This Policy

We may update this Policy. Updates will appear on our website.

12. Contact

bottom of page