Privacy Policy

Effective date: [10-01-2025]
Contact: [info@bridgtime.com]

This Privacy Policy explains how we collect, use, share, and protect information when you use the BridgTime website and related documentation and early access forms. BridgTime is in planning and some features may change or may not launch. This document is for information only and does not provide legal, financial, or investment advice.

1. Who we are

BridgTime is exploring a B2B workflow that standardizes settlement pending sales into a machine readable evidence object called an RVA. We may use AI to prepare an RVA and to flag issues. Where useful a hash of the RVA may be recorded on a public blockchain. BridgTime does not provide custody or transfer of funds. Approvals and payouts are determined by partners under their own policies and regulations.

2. Information we collect

We collect information in three groups.

A. Site and contact data
• Contact details that you provide, such as name, work email, company, and role
• Support messages, request access forms, and feedback you submit
• Device and usage data for the site, such as pages viewed, approximate location, browser type, and cookies or similar identifiers

B. Business evidence that you choose to upload for testing
• Files and exports that you provide, such as photos, PDFs, CSVs, and Excel
• Portal screenshots that you choose to share
• Review notes and flags created during testing

C. On chain meta
• A cryptographic hash and minimal status metadata of an RVA may be written on chain
• Raw documents and personal data are kept off chain

3. How we use information

We use information for the purposes below. Processing is limited to what is necessary for these purposes.

• Operate and improve the website and documentation
• Respond to requests, schedule calls, and manage early access evaluations
• Prepare and test the RVA workflow including AI extraction, standardization, and flags
• Produce usage analytics that help us understand features and reliability
• Maintain security, audit, and fraud prevention
• Meet legal, compliance, and contractual obligations

We do not sell personal information.

4. Legal bases

Where applicable under the laws of the European Economic Area and the United Kingdom, we rely on these legal bases.

• Contract, for example when you request access or ask us to review files
• Legitimate interests, for example to secure our systems and to understand usage in order to improve the service
• Consent, for optional communications and for any testing that requires explicit agreement
• Compliance with legal obligations

You can withdraw consent at any time through the contact listed above.

5. How AI is used

AI may read photos, PDFs, CSVs, and Excel, extract fields, map them into an RVA draft, and flag gaps, duplicates, and sum errors. AI can translate summaries and comments for multilingual collaboration. AI output is subject to human review before use. We do not rely solely on automated decisions that produce legal or similarly significant effects.

6. What is recorded on chain

Only the RVA hash and minimal status metadata may be recorded on a public blockchain. Raw files and personal data remain off chain and encrypted. Blockchain entries are public and typically cannot be changed or deleted. If you ask us to correct or delete off chain data we can act on it, but on chain records will remain visible as part of the immutable ledger.

7. Cookies and analytics

We may use cookies and similar technologies to keep you signed in, remember preferences, and generate site analytics. You can control cookies through your browser settings. Some features may not function without necessary cookies.

8. Sharing of information

We share information only as described here.

• Service providers that host, store, log, or process data under contract and with appropriate protections
• Partners that you authorize for early access testing or reviews
• Professional advisors such as auditors and legal counsel where reasonably necessary
• Authorities where required by law

We do not provide custody or transfer of funds and we do not broker or arrange financing.

9. International transfers

We may store and process information in countries other than your own. When we transfer personal data from the EEA or the UK, we use appropriate safeguards such as standard contractual clauses.

10. Retention

We keep site and contact data for as long as necessary to provide the website and to manage early access requests. Evidence that you upload for testing is retained for the shortest period needed for evaluation and audit, then deleted or de identified. On chain data remains public and immutable.

11. Security

We use administrative, technical, and physical safeguards. These may include encryption in transit and at rest, key management with KMS or HSM, access control with RBAC or ABAC, request signing, transport security, least privilege, and centralized audit logs. No method of transmission or storage is completely secure. If we learn of a security incident we will notify users and authorities when required by law.

12. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object or withdraw consent.

• EEA and UK users can contact us to exercise rights under the GDPR or UK GDPR
• California residents can request information about categories collected, sources, purposes, and disclosures under the CCPA, and can request deletion and correction
• You may lodge a complaint with a supervisory authority

We may ask you to verify your identity before acting on a request.

13. Children

The service is intended for business users. We do not knowingly collect personal data from children. If you believe a child provided personal data, contact us and we will take appropriate steps.

14. Third party links

The website may link to third party sites and services. Their practices are governed by their policies, not this policy.

15. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Material changes will be highlighted for a reasonable period.

16. Contact

To ask questions or exercise your rights, contact us at [info@bridgtime.com].