Privacy Policy

Your documents and scans

PDFs, document scans, file names, page text, and the values you type into a document are processed on your device unless you choose AI blank finding as described below. Bridge Sign does not store those document files, file names, page text, filled values, or AI page images.

When you export or share a finished document, your browser or device creates and handles that file. You are responsible for where exported or shared files are saved or sent and for how recipients handle them. Bridge Sign records a usage event, but not the document or its contents.

Optional AI blank finding

If you tap Find blanks with AI, Bridge Sign sends images of the selected pages to whichever AI provider is configured—Anthropic or OpenAI—for the purpose of finding the locations and types of likely blanks. Bridge Sign processes those page images in memory and does not store them.

The provider’s processing and retention, including processing for security and abuse monitoring, is governed by its applicable terms and policies. See the Anthropic Privacy Center and OpenAI API data controls.

Requests to OpenAI are sent with storage disabled. That setting does not by itself disable all provider retention, including retention that may apply for security or abuse monitoring.

Account information we keep

If you create an account, we store:

• Your email address.
• The My details fields you choose to save: name, birth date, phone number, and address.
• Your saved drawn or typed signatures.
• Your plan and subscription status.
• Usage events containing the event type, page count when provided, platform, and timestamp—never document content.
• Support communications and internal support notes if you contact us.

Why we use this information

We use account information to provide sign-in, auto-fill My details, save signatures, apply plan limits, answer support requests, prevent abuse, and keep Bridge Sign secure. Bridge Sign does not use document content for advertising or model training; AI-provider processing is governed by the provider policies linked above.

Where information is handled

Supabase stores the account database in Montréal, Canada (ca-central-1). Cloudflare provides hosting and content delivery through its global network. Resend delivers sign-in email. These services do not all process information only in Montréal. If you use AI blank finding, Anthropic or OpenAI also processes the page images as described above.

We do not sell or rent personal information. We share account and document-related information only with these service providers as needed to operate Bridge Sign, or when the law requires it.

How long we keep information

Deleting your account removes your profile, saved signatures, and subscription from active account records. Copies in provider backups expire according to the provider’s backup schedule. Files you exported or shared are outside Bridge Sign and are not removed by account deletion.

Usage events may remain after deletion, but their link to your account is removed. Support emails remain in our support mailbox. Administrator audit records are retained for security and accountability; they may contain account identifiers and before-and-after records and are not anonymous.

Cookies and local storage

Bridge Sign uses cookies needed for sign-in and session security. We do not use advertising trackers. Your browser may also keep local app data needed for features such as temporary scan-to-sign handoff and remembering dismissed notices.

Your privacy rights

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA), you may ask to access or correct your personal information, or ask us to delete it, subject to lawful exceptions.

You can update saved information or choose Delete account in My details. You can also email sign@bridgeamplified.com.

Children

Bridge Sign is not intended for anyone under 16. We do not knowingly collect personal information from children under 16.

Security incidents and breaches

We use reasonable safeguards designed to protect the account information we hold. If a breach creates a real risk of significant harm, we will investigate it and notify affected people and privacy regulators as required by Canadian law.

Changes to this policy

We may update this policy as Bridge Sign changes. We will post the revised policy here with a new effective date and provide additional notice when a change is important.

Contact us