Legal
Privacy Policy
v0.2-pilot · Last updated: [DATE]
Who is responsible.
[ENTITY] is responsible for your information. Contact: [LEGAL_EMAIL].
What we collect.
(a) Account data: name, email, password hash, country of residence, date of birth (used only to confirm you're 18+); (b) Profile and content you choose to post; (c) The light-verification signals you choose to give us (e.g., a website, a public business/social link, or a reference) and our review notes on them; (d) Usage and device data: log data, IP address, pages viewed, approximate location derived from IP; (e) Feedback, including interview notes and — only with your separate consent — recordings; (f) Communications with us. We do not collect government ID documents or biometric data during the pilot. If identity verification launches later, we'll ask for specific separate consent first.
What we use it for.
Operating the pilot; showing the right US / Nepal / Bridge view; light verification, safety, and moderation; improving the product; and communicating with you about the pilot. We do not sell your personal information, and we do not use your content to train third-party AI models.
Where it's processed.
Our servers and providers are in the United States. If you use BridgeLink from Nepal, your information will be transferred to and processed in the United States, where privacy laws differ from Nepal's. We ask for your explicit consent to this transfer at signup.
Who we share it with.
Providers that host and run our infrastructure ([Vercel — hosting], [Supabase — database/storage], [analytics — TBD]) under contracts limiting their use of your data; authorities where legally required; and a successor entity if BridgeLink is reorganized (with notice).
How long we keep it.
Account data: while your account is active and up to 90 days after a deletion request (backup cycles). Pilot feedback: up to 2 years. We delete or anonymize when no longer needed.
Your choices and rights.
Contact [LEGAL_EMAIL] to access, correct, or delete your account data — we honor this for all pilot users regardless of location. You can withdraw consent by closing your account (this doesn't undo processing already done).
Age.
BridgeLink is for adults 18+. We don't knowingly collect data from anyone under 18; if we learn we have, we delete it.
Changes.
We'll notify you of material changes and, where required, ask for renewed consent.
A Nepali translation of this notice is required before Nepal-side onboarding.