BridgeCircle

BridgeCircle Privacy Policy

Last updated: October 13, 2026

BridgeCircle Inc. (“BridgeCircle,” “we,” “us”) respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to the BridgeCircle websites (including bridgecircle.org), mobile apps, and related services (the “Service”). Capitalized terms not defined here have the meanings given in our Terms of Service.

This Privacy Policy is accompanied by a separate U.S. State Privacy Rights Supplement, which forms part of this Policy and provides additional disclosures and rights for residents of U.S. states with comprehensive privacy laws.

1. Who Is Responsible for Your Information

BridgeCircle’s role depends on the activity:

  • Community-provided rosters and invitations. When a school or organization (“Community”) gives us contact details to invite prospective members, the Community decides why and how that information is used, and BridgeCircle acts on the Community’s behalf (a service provider). Our handling of that data for the Community is governed by our agreement with the Community.
  • Member registration and use of the Service. Once you register and use the Service, BridgeCircle decides how your information is handled to provide the member-facing Service (a business).
  • Community administration, events, and moderation. For some activities, BridgeCircle and your Community each play a role.
  • Private messages and connections. BridgeCircle provides and controls this functionality.

2. Information We Collect

2.1 Information you provide. Name; email address; school or organization affiliation; graduation year; profile photo; biography; city-level location; employment information; education history; skills; contact links; help preferences; resume files; and the content of your Asks, connection requests, messages, and event responses.

2.2 Information your Community provides. Invitation-roster details such as email address and, where available, name, graduation year, and date of birth (used only to confirm your identity and eligibility when you join), which may exist before you register.

2.3 Information from third-party integrations. If you sign in with or connect Google or LinkedIn, we receive authentication identifiers and basic profile information based on the permissions you grant.

2.4 Information collected automatically. Authentication and activity timestamps; device and app information; log and diagnostic data; and notification preferences. See Section 9 (Cookies).

2.5 Safety and moderation records. Reports, moderation evidence, and audit records generated through the Service.

3. How We Use Information

We use information to: create and manage accounts; operate the member directory, Asks, connections, messaging, events, and news; personalize and improve the Service; provide customer and safety support; send service communications and (where permitted) other notifications; maintain security, prevent fraud and abuse, and enforce our Terms; and comply with law.

4. Artificial Intelligence Features

The Service may use AI to support features such as resume extraction, help with drafting Asks or introductions, profile summarization, and search (including embeddings). We use AI providers as service providers to process data on our instructions to provide these features. Our agreements with these providers do not permit them to use your personal information to train or improve their own models. We do not use your personal information to train or fine-tune generalized AI models, and we do not use AI to generate profile summaries of Teen Members.

5. How We Share Information

We share information: with other members, as your profile and activity settings allow; with your Community, for administration, events, and moderation; with service providers who host and support the Service under contract; for legal, safety, and security reasons; and in a business transfer (merger, acquisition, or sale of assets). We do not sell your personal information, and we do not share it for cross-context behavioral advertising. See the U.S. State Privacy Rights Supplement for how certain sharing is treated under state law.

Service providers. We maintain a list of the service providers that process personal information to support the Service at https://bridgecircle.org/privacy/sub-processors, which currently includes categories such as hosting and database (Supabase, Railway), email delivery (Resend), diagnostics (Sentry), mobile app updates and push notifications (Expo, routing through Apple/Google), place search (Google Maps Platform), and AI processing (Anthropic, Voyage AI, Google Gemini, OpenAI).

Private messages. Private messages are visible to their participants. BridgeCircle personnel do not routinely read private messages, but we may review them when a message or conversation is reported, when needed to investigate suspected violations of our Terms or to protect member safety, or when required by law. BridgeCircle staff can access member information to run, support and secure the Service, and each access is recorded. Community Administrators can see the content of a private message only when it is reported to them.

6. Data Storage and Transfers

BridgeCircle is based in the United States, and our primary hosting is in California. Your information is stored and processed in the United States and in other locations where our service providers operate.

7. How Long We Keep Information

We keep information for as long as needed to provide the Service and for legitimate business, legal, safety, and audit purposes. Our retention schedule is:

  • Active member profile data: while the account is active, and deleted within 30 days after a completed deletion request (which includes the 7-day cancellation window).
  • Invitation-roster records (never registered): kept while the Community keeps the invitation, and deleted when the Community removes it or its agreement with us ends.
  • Private messages: while both participants’ accounts are active; a deleted user’s side removed or anonymized within 30 days of deletion.
  • Moderation and safety records: 3 years from resolution.
  • Authentication/activity logs: 90 days.
  • Diagnostic logs: 30 days.
  • Backups containing personal data: 30-day rolling cycle.
  • Financial/billing records: 7 years.
  • AI-derived data (embeddings, summaries): deleted when the source profile is deleted.
  • Résumé files: while the account is active; deleted with the account.

8. Your Choices

You can review and update your profile, adjust visibility and notification settings, request a copy of your data (in Settings), and delete your account in Settings. Some records may be retained as described in Section 7. To make a privacy request, contact privacy@bridgecircle.org. See the U.S. State Privacy Rights Supplement for state-specific rights and how to exercise them.

9. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, security, and preferences. You can control cookies through your browser settings. We do not use advertising cookies, and we do not permit third parties to use cookies or similar technologies on the Service to collect information for cross-context behavioral advertising. Where required, we honor recognized opt-out preference signals (such as Global Privacy Control) as described in the Supplement.

10. Security

We use technical and organizational measures designed to protect personal information, such as encryption in transit, access controls, and monitoring. No system is completely secure, and we cannot guarantee absolute security.

11. Children and Teen Members

The Service is not for anyone under 16, and we do not knowingly collect personal information from anyone under 16. Members 16–17 have restricted access as described in the Terms. If we learn that we have collected personal information from anyone under 16, we will delete it and close the account, regardless of any consent provided.

For Teen Members, we: (a) limit the visibility of Teen Member profiles to members and Administrators of the Teen Member’s own Community; (b) do not send Teen Members push notifications or marketing communications; (c) do not sell their personal information, share it for cross-context behavioral advertising, or use it for targeted advertising; and (d) do not use their information to generate AI profile summaries. A parent or guardian of a Teen Member may contact us at privacy@bridgecircle.org to review, correct, or request deletion of the Teen Member’s information. California residents under 18 may also request removal of content they have posted, as described in the Supplement.

12. Changes to This Policy

We may update this Policy. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice (for example, in-app or by email).

13. Contact Us

BridgeCircle Inc. 3545 Wilshire Boulevard, Apt 905, Los Angeles, CA 90010 privacy@bridgecircle.org