Privacy & data handling

How we handle your information.

Effective October 22, 2026

Who we are

BridgeforgeAI is a Colorado-owned AI automation business. Questions about this policy can go to info@bridgeforgeai.com.

When you visit this website

• No cookies or ad trackers from us. We don’t set cookies or use advertising, retargeting, or social media tracking scripts.
• Hosting. The site is served by Cloudflare, which processes technical information such as IP address and browser type to deliver the site and protect it from abuse.
• Visit counts. We may use Cloudflare Web Analytics, which counts page views without cookies and without identifying individual visitors.
• Your theme choice. If you switch between light and dark mode, that preference is saved in your own browser and never sent to us.
• Live demos. When you talk to a demo receptionist on our Demo pages, your voice and the conversation are processed by Vapi, our voice AI provider, and its speech and AI providers to run the call. Please don't share personal details in a demo call.
• Our website assistant. The “Ask” button on our pages (and on our clients' websites) has three parts. Chat: your messages are answered by an AI model run by Cloudflare (Workers AI); we don't store chat conversations or log what you write. Talk: a live voice call, processed by Vapi as above. Book: the name, phone number, and reason you enter go onto that business's calendar (Google or Microsoft), the business gets an email about it, and if you ask for a confirmation text, your number is sent to Twilio to deliver it. Reply STOP to any text to opt out.

When you email us

We receive your email address and whatever you include in your message. We use it to reply, schedule a call, and follow up on your request. Email is stored in our business email provider, Microsoft 365. Please don’t send passwords or sensitive customer information by email.

Client work

When we build a workflow or AI solution for your business:

• Protected by an NDA. When you become a client, we sign a non-disclosure agreement with you before we use any of your data.
• Your data stays yours. We use it only to scope, build, test, and support the work you’ve agreed to.
• No training on your data. We don’t use your business data to train AI models, and we choose AI provider settings that don’t either, wherever the provider offers that option.
• You know which tools touch it. Before we build, we tell you which AI providers and services will process your data.
• Client portal. You sign in to the portal with your email address and a password you choose. We store only a scrambled (hashed) form of your password, never the password itself, and sessions end when you sign out or change your password. When you talk to an AI receptionist in the portal, your voice and the conversation are processed by Vapi, our voice AI provider, and its speech and AI providers to run the call.
• Calls your AI receptionist answers. The receptionist tells callers it's an AI assistant. Calls aren't recorded as audio. For each call we keep the caller's number, a written summary, and the transcript for 90 days, then delete them automatically; you see them in your portal, and the summary is emailed to the addresses you choose. Appointment details for confirmation texts are kept 30 days. If you use the tech assistant, the documents you upload are stored for your company only (Cloudflare R2), searched only for your team's questions, and read by AI models run by Cloudflare (Workers AI), including photos your techs send with a question. Those photos are never stored. Your techs' questions, Forge's answers, and their ratings are kept for a year (then deleted automatically) so your managers can see insights and fix gaps in your documents; only your managers, the SMEs you name (ratings only), and BridgeforgeAI can see them. Deleting a document removes it and its search index. Disconnecting your calendar deletes our stored access right away; you can also remove BridgeforgeAI in your Google or Microsoft account settings.
• Photos your customers send. When a customer texts a photo to your receptionist line or sends one in your website chat, Forge (AI models run by Cloudflare) reads what it can see, like the equipment, its model, or an error code, to decide how soon a visit is needed. The photo and what was read are kept for your company only (Cloudflare R2), shown to your team with the conversation and the job, and deleted automatically after a year. Forge never gives customers repair instructions.
• Least access. We ask only for the access a project needs, and we prefer working in accounts your business owns.
• Clean handover. When a project ends, you can ask us to remove our access and delete copies of your data we hold.

Google and Microsoft calendars

A business using our portal can connect its Google Calendar or Microsoft Outlook / 365 calendar. Here is exactly what that connection is used for.

• What we access. The connected account's email address, when it's busy or free, and the events on its main calendar (title, time, location, and link), and permission to add and update events.
• What we do with it. Show the business's calendar to its own team in the portal and the BridgeforgeAI app; find open times so the AI receptionist can offer and book appointments; add the appointments it books and the meetings the team adds (with the invitations the calendar sends); and mark appointments confirmed when a caller replies. Nothing else.
• What we keep. An encrypted access key, so the connection keeps working, and which account is connected. Calendar events are read when the team opens the calendar and are not copied into our systems. The details of appointments the receptionist books are kept with that call's record (90 days) and for confirmation texts (30 days).
• Who sees it. Only the people on that business's team, in its own workspace, and BridgeforgeAI staff when supporting the business. During a call, the open times the receptionist offers are passed to Vapi, our voice AI provider, to speak them to the caller.
• What we never do. We don't sell calendar data, use it for advertising, use it to train AI models (ours or anyone else's), or share it except as described here or when required by law. People at BridgeforgeAI don't read it except to support the business at its request, for security, or when required by law.
• Google's rules. BridgeforgeAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Turning it off. Disconnecting the calendar in the portal deletes our stored access right away. You can also remove BridgeforgeAI under your Google account's Third-party connections or your Microsoft account's app permissions (work or school accounts, personal accounts).

Sharing

We don’t sell your information. We share it only with the service providers needed to run our business and deliver your project, or when required by law.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it by emailing info@bridgeforgeai.com.

Changes

If we change this policy, we’ll update it on this page and change the effective date above.