Privacy Policy

Effective Date: July 2025

Bridger AI Limited and its affiliates (“BridgerPay”, “we”, “our”, or “us”) provide a payment orchestration platform enabling merchants to connect with financial institutions and process transactions through our checkout solution. We recognize the importance of data privacy and are committed to protecting personal information entrusted to us by our merchants, their customers (“End Users”), website visitors, and partners. This Privacy Policy explains how we collect, use, share, store, and secure personal information, and outlines your rights under applicable laws, including the EU General Data Protection Regulation (GDPR) and other data protection frameworks.

1. Who This Policy Applies To

This Privacy Policy applies to:

• Visitors to our website (www.bridgerpay.com)
• Merchants using our Services
• End Users whose personal data is processed through our checkout solution
• Any other individual interacting with us or our Services

2. Information We Collect

We may collect the following types of personal information:

Directly from you (Merchant or End User):

• Name, email address, phone number
• Billing, shipping, and payment details
• Account login credentials
• Communications and support requests

Automatically (via cookies, SDKs, APIs):

• Device and browser information
• IP address and location data
• Usage metrics and transaction logs
• Behavioral and performance data (e.g., clicks, heatmaps)

From third parties:

• Payment processors, fraud prevention tools, and KYC/AML services
• Your employer or contracting entity (if you are a merchant or user of our Services)

3. How We Use Your Information

We use personal information to:

• Provide and maintain our Services
• Authenticate access and manage user accounts
• Process transactions securely
• Prevent fraud and ensure security
• Respond to inquiries and offer support
• Comply with legal obligations (e.g., anti-money laundering laws)
• Improve and develop our platform, analytics, and features
• Send updates, alerts, and marketing (with consent where required)

4. Legal Basis for Processing

We process your data under one or more of the following legal bases:

• Performance of a contract – e.g., delivering checkout and payment services
• Legitimate interests – e.g., fraud prevention, service improvements
• Legal obligation – e.g., compliance with financial regulations
• Consent – e.g., marketing communications, cookies

5. Data Sharing and Disclosure

We may share your data with:

• Our trusted third-party service providers
• Payment processors and financial institutions are integrated into our platform
• Legal or regulatory authorities, when required
• Acquirers or successors in the event of a merger, acquisition, or asset sale

We do not sell your personal data.

6. Cross-Border Data Transfers

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

You may contact us at privacy@bridgerpay.com to request a copy of the safeguards used for cross-border transfers of personal data.

7. Data Retention

We retain personal data for a period of up to three (3) years after the end of our relationship with you, unless a longer retention period is required or permitted by law. This retention period allows us to:

• Provide and support our Services
• Comply with legal, accounting, and regulatory requirements (e.g., anti-money laundering laws)
• Resolve disputes, enforce agreements, and prevent fraud

After the retention period, personal data will be securely deleted or anonymized, unless otherwise required by applicable law.

8. Your Rights

Depending on your location, you have the right to:

• Access, correct, or delete your personal data
• Withdraw consent at any time (where processing is based on consent)
• Object to or restrict certain types of processing
• Receive a portable copy of your data
• Lodge a complaint with a data protection authority

To exercise your rights, contact us at privacy@bridgerpay.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Authentication and session management
• Analytics and performance tracking
• Personalization and marketing (with consent)

See our Cookies Policy for more details and control options.

10. Data Security

We implement robust technical and organizational measures to protect personal data, including:

• Encryption in transit and at rest
• Access controls and multi-factor authentication
• Regular penetration testing and security audits

However, no system is 100% secure. Please contact us immediately if you believe your account or data has been compromised.

11. Children’s Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that information as soon as possible.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with the “Last Updated” date. We encourage you to review it regularly.

13. Contact Us

If you have any questions, concerns, or complaints, please contact us at:
📧 privacy@bridgerpay.com.
🏢 Bridger AI Limited, Eleftherias Street 153, Limassol, 3042, Cyprus