Privacy Policy

Account information. When you sign up we collect your email address, name (if provided), workspace details, and authentication data from our identity provider.

Billing information. If you subscribe to a paid plan, payment details are processed by our payment processor (for example, Stripe). We do not store full card numbers on Bridgly servers.

Service & link data. We store content you create in Bridgly—such as short-link destinations, widget configuration, domains you verify, and related settings.

Usage & analytics events. When someone opens a Bridgly link, scans a QR code, or interacts with an embed, we may collect technical signals needed to route and attribute that visit (for example timestamps, device type, approximate location derived from IP, referrer, page URL, and channel parameters). We use hashed or truncated identifiers where practical for fraud prevention and analytics.

Communications. If you email us or contact support, we keep the contents of that correspondence to respond and improve the Service.

We use information to:

• Provide, operate, and improve the Service
• Authenticate accounts and secure workspaces
• Route clicks and scans to the correct destinations
• Show click, scan, and (when enabled) install-matching analytics in your dashboard
• Process subscriptions and send transactional email
• Detect abuse, prevent fraud, and enforce our Terms
• Comply with law and respond to lawful requests

We do not sell your personal information. We share data only with:

• Service providers who help us run Bridgly (hosting, databases, email, payments, analytics infrastructure), under contractual confidentiality obligations
• Your configuration — destinations and embeds you set determine where end users are sent; those third-party sites have their own privacy practices
• Legal & safety — when required by law, or to protect Bridgly, our users, or the public
• Business transfers — in connection with a merger, acquisition, or asset sale, with notice where required

We use cookies and similar technologies for authentication, security, preferences, and understanding how the marketing site and product are used. You can control cookies through your browser settings; disabling some cookies may limit account or product features.

We retain account and Service data for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion of your account; some records may remain in backups or logs for a limited period.

If you connect a store or payment account (Shopify or Stripe), Bridgly receives data about your sales so it can credit the partner whose link or code produced each one. For this data you are the controller and Bridgly processes it on your behalf.

What we receive. For each paid order or invoice: its ID, amount, currency, any discount code used, and any Bridgly tracking ID it carries.

• Shopify: the Shopify customer ID (or, for guest checkouts, the order ID) and your shop domain. We do not receive customers' names, email addresses, phone numbers, or addresses from Shopify.
• Stripe: the Stripe customer ID and, where the invoice includes it, the customer's email address, used only to stop a partner from earning commission on their own purchase.
• Refund notifications, so we can reverse a partner's commission.

How we use it. Only to attribute sales to partners, calculate and reverse commissions, prevent self-referral and fraud, and show you these results. We do not sell it, use it for advertising, or share it except with the service providers that host Bridgly.

How long we keep it. While your integration is connected and as long as the partner commissions and payouts it supports must be kept for accounting and tax purposes. When a customer asks you to delete their data (for example through Shopify's data-erasure request), we remove the customer identifier from those records and keep only the anonymous sale amounts that back partner payouts. When you uninstall our Shopify app, we remove customer identifiers from all of that store's records. Deleting your workspace deletes all of its sales records.

Security. This data is encrypted in transit (HTTPS) and at rest, and access tokens for your connected accounts are additionally encrypted.

We use industry-standard safeguards to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Bridgly is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

We may process information in the United States and other countries where we or our providers operate. By using the Service you understand that your information may be transferred to jurisdictions with different data-protection laws than your own.

Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to certain processing. Contact us at support@bridgly.co to make a request. We may need to verify your identity before responding.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

Questions about privacy: support@bridgly.co.