Privacy Policy
BRIDGE AI Lab respects the privacy of everyone who visits our website. This Privacy Policy explains what information we collect through bridge-lab.ai, how we use it, the legal bases we rely on, and the rights available to you.
This policy covers the BRIDGE AI Lab website only. Research participation, program enrollment, and partnership engagements are governed by separate consent forms, agreements, and research protocols provided at the point of participation.
1. Who we are
This website is operated by BRIDGE AI Lab, which is in the process of incorporating as a not-for-profit corporation in the State of New York. We will update this policy with our legal entity name and registered address once incorporation is complete.
For questions about this policy or your personal information, contact us at hello@bridge-lab.ai.
2. Information we collect
We limit collection to what is necessary to operate the site and understand how visitors use it.
Information collected automatically
When you visit bridge-lab.ai, our website platform and analytics providers automatically collect certain technical information, including:
- IP address
- Device type, operating system, and browser type
- Referring URL and pages visited on our site
- Approximate geographic location derived from IP address, typically at the city or region level
- Date, time, and duration of your visit
Information you provide directly
If you contact us by email, we receive the information you choose to share, including your name, email address, and the content of your message. We do not currently operate contact forms, newsletter signup, or account registration on the site. If we add any of these, we will update this policy before enabling them.
Information we do not collect
We do not knowingly collect payment information, health information, government identification, or precise location data through the website. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
3. How we use information
We use the information described above to:
- Operate, secure, and improve the website
- Understand which content is most useful to our audiences
- Respond to inquiries sent to us by email
- Detect, prevent, and address technical issues and misuse
- Comply with legal obligations
4. Legal bases for processing (EU and UK visitors)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation and the UK GDPR:
- Consent, for analytics cookies and other non-essential cookies. You may withdraw consent at any time through the cookie banner or your browser settings.
- Legitimate interests, for operating and securing the website and responding to inquiries you initiate. Our interests are balanced against your rights and freedoms.
- Legal obligation, where processing is required by applicable law.
5. Cookies and similar technologies
Our website uses cookies and similar technologies. Details of the specific cookies used, their purposes, and how to manage them are provided in our Cookie Policy.
6. Third-party services
We use the following third-party services to operate the website:
- Squarespace, our website hosting platform, which processes technical information necessary to deliver the site.
- Google Analytics 4, which helps us understand aggregate site usage. Google Analytics 4 does not log or store IP addresses.
- Google Fonts, which delivers some of the typefaces used on the site. When a page loads, your browser connects to Google's servers, which receive your IP address in order to deliver the font files.
Each provider processes information under its own privacy terms. We recommend reviewing the Squarespace Privacy Policy and the Google Privacy Policy for details.
7. International data transfers
BRIDGE AI Lab is based in the United States. When you visit our website, information about your visit is processed in the United States and in other countries where our service providers operate. For transfers of personal data from the EEA, the United Kingdom, or Switzerland, we rely on the safeguards implemented by our service providers, including Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
8. Data retention
We retain information only for as long as necessary for the purposes described in this policy.
- Analytics data is retained according to the retention period configured in Google Analytics, which we set to the minimum useful window.
- Email correspondence is retained for as long as needed to respond to your inquiry and to maintain a reasonable record of communications, after which it is deleted or archived.
9. How we protect information
We take reasonable administrative, technical, and physical measures to protect information collected through the website. No system is completely secure, and we cannot guarantee absolute security.
10. Your rights
Depending on your location, you may have the following rights regarding your personal information.
For visitors in the EEA, United Kingdom, or Switzerland
Under GDPR and UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Request data portability
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
- Lodge a complaint with your local supervisory authority
For visitors in California
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of personal information we collect from you
- Request correction of inaccurate personal information
- Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
- Limit the use of sensitive personal information. We do not collect sensitive personal information through the website.
- Non-discrimination for exercising these rights
How to exercise your rights
To exercise any of these rights, contact us at hello@bridge-lab.ai. We will respond within the timeframes required by applicable law. We may need to verify your identity before fulfilling certain requests.
11. Children
Our website is intended for a general adult audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will take appropriate action.
12. Do Not Track
Some browsers offer a Do Not Track signal. Because there is no consistent industry standard for how to respond to these signals, our website does not currently respond to them. You can manage tracking through the cookie banner and through your browser settings.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of the policy and, where appropriate, provide additional notice on the website. We encourage you to review this policy periodically.
14. Contact us
For questions or concerns about this Privacy Policy or your personal information, contact us at hello@bridge-lab.ai.