Legal & Privacy | BRDG/LINK

Website and app data

Privacy notice

1. Who is responsible

The operator of BRDG/LINK is responsible for personal data it receives through this website, beta support, and direct correspondence. The operator's legally required identity and address are not yet present in the project and must be added before public commercial launch. Public registration remains disabled until the operator details and a working contact channel are published.

2. What the website processes

Data	Purpose and legal basis	Retention and recipients
Connection data such as IP address, request time, requested URL, browser or device details, and security signals.	Deliver and protect the site. The intended basis is the operator's legitimate interest in a secure, functioning website.	The site is intended for Cloudflare Pages. Cloudflare may process connection data under its service configuration and privacy policy. Retention depends on that configuration and applicable security or legal needs.
The light or dark theme value stored as `atlas-site-theme` in your browser.	Remember the setting you explicitly choose. This is a functional preference requested by the user.	It remains on your device until you clear site data or replace the choice. The site operator does not receive this value.
Account name, email identifier, password hash, role, sessions, suspension state, and subscription dates and allowances.	Authenticate the account, enforce BRDG/LINK access, administer the beta, and protect the service. The intended bases are performance of the requested beta service and legitimate interests in access control and security.	Stored in Cloudflare D1. Passwords are stored only as password hashes. Account records remain while the account exists; sessions expire or are revoked. Account deletion removes linked subscription and usage records.
Managed AI request ID, route, answering provider and model, timing, status category, and numeric token usage.	Prevent duplicate requests, enforce allowances, show usage history, diagnose provider health, and administer access. Message content is excluded from these records.	Stored in Cloudflare D1 for the life of the account and deleted with it, except narrowly retained security records where a legal or security need applies.
Managed AI message content and system instructions submitted from BRDG/LINK, plus the provider response.	Complete the AI request the signed-in user chose to make.	Passes transiently through Cloudflare Pages Functions to Groq, OpenRouter, or Gemini. BRDG/LINK does not write this content to D1 or its application logs. The answering provider applies its own processing and retention terms.
Privacy-safe administrative audit events, such as role, suspension, subscription, session, deletion, and provider-test actions.	Protect accounts, trace administrative changes, and investigate misuse without storing conversations or credentials.	Stored in Cloudflare D1. Events contain internal user IDs, action names, status, timestamps, and bounded non-content metadata.

Public account creation and password-recovery email are not available in this release. The website does not use account data for advertising, profiling, or automated decisions with legal or similarly significant effects.

3. BRDG/LINK desktop data

Signing in and using managed AI sends the account and request data described above. BRDG/LINK does not send the operator a stored copy of your local conversations, notes, projects, goals, budgets, memories, tasks, credentials, or files. Structured personal records, encrypted project and goal tasks, budget records and locked salary cycle archives, settings, and bounded diagnostics are encrypted on disk. The data key and supported credentials are protected for the current Windows user. Data is temporarily decrypted in application memory while BRDG/LINK displays or uses it. This protects data at rest; it does not protect against every risk, including malware or another process already acting as the same Windows user.

Some items stay outside the encrypted store: workspace files, original CSV files, selected receipt or price images, and retained messaging media are ordinary local files. BRDG/LINK does not encrypt or delete the originals. You are responsible for where those files are stored and backed up.

4. Connected services and AI

BRDG/LINK is local first, not fully offline. BRDG/LINK checks account access online at launch and while the desktop app is running. Managed AI requests pass through the BRDG/LINK service. If you use an email account, calendar, messaging service such as WhatsApp, weather or news source, Codex, Claude Code, MCP server, plugin, or other integration, information needed for the requested operation may go to that provider or local program. Each provider applies its own terms, privacy, retention, and international transfer rules. Review those rules before connecting it.

Budget calculations, salary cycle archiving, CSV parsing, and financial image text recognition run locally. Budget records and raw financial images are not automatically sent to cloud AI. Text is sent only when you deliberately submit it to managed AI. AI responses are generated by machines, may be inaccurate, and do not make legal or similarly significant decisions about you on behalf of the site operator.

5. Sharing, transfers, and sale of data

The site operator does not sell website visitor data and the current site has no advertising network. Information may be handled by Cloudflare and the managed provider that answers, by services you deliberately connect, or when disclosure is required by law or necessary to establish or defend legal claims. Some providers may process data outside the European Economic Area. Their applicable transfer safeguards and privacy notices govern that processing; do not connect a provider unless those terms are acceptable to you.

6. Your rights

Where the GDPR applies, you may have rights to information, access, correction, deletion, restriction, portability, and objection, plus the right to withdraw consent without affecting earlier lawful processing. These rights are not absolute. A signed-in user can update the account name and, except for the protected developer account, request account deletion through the Account page. A direct privacy contact must be published before public registration opens. Identity may need to be verified without collecting more information than necessary.

You may also complain to the Dutch Data Protection Authority or the supervisory authority where you live. Local app records that the operator never receives must be managed in BRDG/LINK or on your own device; the operator cannot retrieve data it does not hold.

7. Children

BRDG/LINK is designed as a general personal productivity beta, not a service directed at children. A person who cannot legally agree to these terms must use BRDG/LINK only with a parent or legal guardian's permission and supervision. Do not send children's personal data in a beta request unless it is necessary and lawful.

8. Changes

This notice will be updated when website collection, hosting, connected services, distribution, or the operator's identity changes. Material changes should be communicated before they take effect where the law requires it. The effective date at the top identifies the published version.

Cookies and similar technology

Website storage notice

The site does not load analytics, advertising, social media pixels, or marketing trackers. Better Auth sets an essential session cookie after successful sign-in so the website can recognise the signed-in account and enforce access. It also uses browser local storage only after you press the theme button, saving the value light or dark under atlas-site-theme. This preference does not identify you to BRDG/LINK and is used only to restore your selected appearance.

You can remove site storage through your browser controls. Removing the session cookie signs you out; if local storage is blocked, the theme is not remembered. Because these items are strictly functional and not used for tracking, the site does not show a consent banner. This must be reassessed before adding analytics, advertising, embedded external media, profiling, or any optional storage.

Personal use Windows beta

Beta terms of use

1. When these terms apply

These terms apply when you install, access, or use an BRDG/LINK beta build supplied with or linked to them. A website account or desktop sign-in is not a purchase and does not by itself create a paid order. Access currently remains limited to the configured developer account. If a separately signed or expressly accepted agreement conflicts with these terms, that agreement controls for the conflict.

2. Personal use licence

Subject to these terms, the operator grants beta users a limited, revocable right that is not exclusive and cannot be transferred to install and use BRDG/LINK for lawful personal purposes during the beta. This beta is not offered as business accounting, professional practice, banking, investment, tax, legal, medical, or emergency software. You may not resell, sublicense, bypass security controls, distribute a build without permission, or use BRDG/LINK to violate another person's rights or applicable law.

3. Beta status and statutory rights

BRDG/LINK is prerelease software. Features, integrations, compatibility, data formats, and availability may change, fail, or be withdrawn. Current builds may be unsigned and may trigger Windows security warnings. Nothing in these terms removes mandatory consumer rights, legal guarantees, remedies, or liabilities that cannot lawfully be excluded. If BRDG/LINK is later sold or supplied in exchange for personal data beyond what is necessary to provide it, the operator must provide the additional information required before a contract, conformity, update, withdrawal, and remedy information required at that time.

4. AI, automation, and professional decisions

AI output and image recognition can be incomplete, biased, or wrong. Review drafts, extracted receipt details, imported transactions, calculations, suggested actions, recipients, dates, and amounts before relying on or confirming them. BRDG/LINK is a planning and productivity tool, not a professional adviser. Do not use it as the sole basis for financial, legal, medical, employment, housing, credit, safety related, or other decisions with major consequences.

5. Your data and backups

You retain your rights in content you enter or connect. You authorise BRDG/LINK to process it only as needed to provide functions you request. Local first storage is not a backup service. Keep appropriate copies of important source files and information, protect your Windows account, review connected provider access, and remove sensitive information before voluntarily sending diagnostics or support material.

6. External services, plugins, and MCP

External services are not controlled by BRDG/LINK and may be unavailable, change their interfaces, charge fees, or process data under their own rules. New or changed executable plugins and MCP servers remain disabled until you review and enable them; approval is tied to their executable configuration and is invalidated when that configuration changes. Approval is an BRDG/LINK safeguard, not a Windows security sandbox: enabled extensions run local code with the current Windows user's permissions. Connect only providers and local extensions you trust. References to external products do not imply sponsorship, endorsement, or affiliation.

7. Security and acceptable use

Do not use BRDG/LINK to gain unauthorised access, distribute malware, harass people, infringe privacy or intellectual property rights, evade provider restrictions, or perform unlawful surveillance or messaging. Do not test other accounts or data. A private security contact must be published before public registration opens; until then, avoid accessing, changing, or disclosing other people's data.

8. Availability, liability, and termination

The operator may suspend beta access or stop providing a beta build, especially for security, abuse, legal, or technical reasons. To the maximum extent permitted by law, the operator is responsible only for loss that is a reasonably foreseeable result of breaching these terms or failing to use legally required care. Liability is not excluded where exclusion is unlawful, including mandatory liability for intent, gross negligence, death, personal injury, or mandatory consumer remedies. You can stop using BRDG/LINK and remove it from Windows at any time; uninstalling does not necessarily remove external files or connected provider data.

9. Law and complaints

These terms are intended to be governed by Dutch law. If you are a consumer elsewhere, mandatory protections and competent courts available under the law of your habitual residence remain unaffected. A working complaints channel must be published before public registration. The operator should first be given a reasonable opportunity to investigate and respond; this does not restrict your right to contact a regulator, consumer authority, or court.

Publisher and contact

Legal notice

Not complete for public commercial use

The repository does not verify the operator details Dutch rules may require. Publishing guessed personal or registration data would be misleading. The owner must replace the entries below before launch.

Product: BRDG/LINK, an independently developed Windows beta for personal use.
Legal operator: Not yet supplied — full registered name and trade name required before public commercial launch.
Physical address: Not yet supplied — physical or visiting address required unless a lawful exception applies.
VAT ID: Not yet supplied — add if services or products are sold online and the operator is VAT registered.
Email: Not yet supplied — no sender or support mailbox is represented as operational.
Telephone or chat: Not yet supplied.
Website sales: None in the current site. Public registration and checkout are disabled.
Complaints: A working complaints channel must be added before public registration opens.

Intellectual property and external product names

Unless stated otherwise, the BRDG/LINK website text, visual design, logo, and product materials may not be copied or redistributed beyond what applicable law permits without permission. “BRDG/LINK” is not represented here as a registered trademark. Names such as Windows, Microsoft, Outlook, Hotmail, Google, Gmail, WhatsApp, Meta, OpenAI, Codex, Anthropic, Claude, OpenRouter, and other external products belong to their respective owners. BRDG/LINK is an independent project and does not claim endorsement or affiliation.

Website information

Product descriptions reflect the inspected beta implementation at the date above, but beta behaviour and external service availability can change. A disclaimer does not override statutory liability or consumer rights.

Current status

Accessibility statement

BRDG/LINK aims to make this website perceivable, operable, understandable, and robust. The current site uses semantic headings and landmarks, visible keyboard focus, a skip link, text alternatives for meaningful images, responsive layouts, reduced motion support, and colour themes. Text can be zoomed with browser controls.

This is not a claim of WCAG or European Accessibility Act conformance. No independent accessibility audit has been completed. Known limitations include a decorative desktop product preview that scrolls horizontally on narrow screens and the absence of an audio version of this statement. The current website has no checkout or other ecommerce flow; applicability and required statements must be reassessed before BRDG/LINK is sold or otherwise offered as a covered consumer service.

A working accessibility contact must be published before public registration. Do not include sensitive information that is not necessary when reporting a problem through a future contact channel.