Privacy Policy

1. Introduction

Welcome to BridgeLM ("we," "our," or "us"). We operate the website bridgelm.online (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and ensuring transparency about our data practices. By using BridgeLM, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect only the minimum information necessary to provide and improve our Service. The data we collect is strictly limited to the following:

2.1 Personal Information

• Email Address: We collect your email address when you create an account to enable authentication and communication regarding your account.
• Password: We collect your password for account authentication. Your password is encrypted using industry-standard hashing algorithms (bcrypt/Argon2) and is never stored in plain text. We cannot access or view your actual password.

2.2 User-Generated Content

• Flashcard Data: We store all flashcard decks, questions, answers, and related content that you create or upload to our Service. This data is necessary to provide the core functionality of BridgeLM.

2.3 Payment and Subscription Information

• Payment Status: We store only your subscription status (e.g., "Active," "Inactive," "Subscribed," "Cancelled") as received from our payment processor.
• Important: We do NOT collect, store, or have access to your credit card numbers, bank account details, or any other financial information. All payment processing is handled securely by our third-party payment processor, Lemon Squeezy.

2.4 Automatically Collected Information

Like most web services, we may automatically collect certain technical information when you access our Service, including:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use the information we collect strictly for the following purposes:

• Authentication: To verify your identity and provide secure access to your account.
• Service Provision: To store, manage, and display your flashcard data and provide the core functionality of BridgeLM.
• Subscription Management: To verify your subscription status and provide access to premium features.
• Communication: To send you important service-related notifications, such as account updates, security alerts, or changes to our terms.
• Service Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of our Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Third-Party Service Providers

We use trusted third-party service providers to help us operate our Service. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.

4.1 Supabase

We use Supabase for database hosting and authentication services. Supabase stores your email address, encrypted password, and flashcard data. Supabase is GDPR-compliant and implements industry-standard security measures to protect your data.

4.2 Lemon Squeezy

We use Lemon Squeezy as our payment processor. All payment transactions are processed securely by Lemon Squeezy. We do not store or have access to your credit card or banking information. Lemon Squeezy only shares your payment status with us (e.g., whether your subscription is active or inactive).

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following limited circumstances:

• Service Providers: With third-party service providers (such as Supabase and Lemon Squeezy) who assist us in operating our Service, as described in Section 4.
• Legal Requirements: If required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of passwords using secure hashing algorithms
• Secure HTTPS connections for all data transmission
• Regular security audits and updates
• Access controls and authentication mechanisms

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information and flashcard data for as long as your account is active or as needed to provide you with our Service. If you close your account, we will delete or anonymize your personal information within a reasonable timeframe, unless we are required to retain it for legal, regulatory, or legitimate business purposes.

8. Your Rights (GDPR/CCPA)

Depending on your location, you may have certain rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you.
• Correction: You have the right to request correction of inaccurate or incomplete personal information.
• Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions.
• Data Portability: You have the right to request a copy of your data in a structured, machine-readable format.
• Opt-Out: You have the right to opt out of certain data processing activities, such as marketing communications.
• Withdrawal of Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at the email address provided in Section 12.

9. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to enhance your experience on our Service. Cookies are small data files stored on your device that help us remember your preferences and improve functionality.

You can control cookie settings through your browser preferences.

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: bridgelm.online@gmail.com
Website: bridgelm.online

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.