Who is responsible for your data

Bitovn Bridge is operated by VAYUZ Technologies Pvt. Ltd., which acts as the data controller for the information described in this policy. Where Bridge is provided to you through your employer, that organisation is the controller and we act as its processor under a data processing agreement.

Privacy questions, data subject requests and any concern about this policy can be raised through the contact page and will be routed to the team responsible for privacy at VAYUZ Technologies.

Information we collect

We collect only what is needed to run a meeting and keep your account secure.

• Account details — name, email address and organisation, supplied when you register or are invited.
• Meeting metadata — room identifiers, participant lists, join and leave times, and meeting duration.
• Usage signals — microphone, camera and screen-share activity durations used to generate your participation summary.
• Technical data — browser, device type, and connection quality metrics used to diagnose call issues.
• Contact enquiries — the name, email address, organisation and message you submit through the contact form.

Legal bases for processing

Under the UK and EU GDPR we rely on the following legal bases, depending on what is being processed.

• Performance of a contract — creating your account, connecting your meetings, and delivering attendance and participation summaries.
• Legitimate interests — protecting accounts against fraud and automated abuse, diagnosing faults, and keeping the platform secure and reliable.
• Consent — optional analytics, which are not loaded unless you allow them, and which you can withdraw at any time.
• Legal obligation — retaining limited records where the law requires us to.

Meeting audio and video

Live audio and video are relayed between participants for the duration of a call and are not stored by default.

Where recording is explicitly enabled by a host, all participants are notified before capture begins, and the resulting file is retained only for the period the host organisation has configured.

How we use your information

Your information is used to deliver the service, secure your account, and improve reliability.

• Establishing and maintaining meeting connections.
• Authenticating you and protecting accounts against unauthorised access.
• Producing attendance and participation summaries for meetings you attend.
• Diagnosing faults and improving call quality.

Cookies and browser storage

Bridge does not use advertising or cross-site tracking cookies. We store a small amount of data in your browser, split into the categories below.

Strictly necessary storage is used to keep you signed in and to remember your theme, layout and privacy choice. It cannot be switched off, because the service cannot function without it. This includes your authentication token, your account identifiers and the record of your consent decision.

Optional analytics storage is only created if you allow it. Your choice is remembered for six months, applies equally whether you accept or decline, and can be changed at any time using the Cookie preferences link in the footer.

Third parties and sub-processors

We do not sell your personal information, and we do not use meeting content for advertising. The following third parties process data on our behalf or receive data when you use specific features.

• Google Analytics (Google Ireland Ltd.) — anonymous usage statistics with IP anonymisation enabled. Loaded only after you consent, and never before.
• Cloudflare Turnstile (Cloudflare, Inc.) — bot and fraud prevention on public sign-in and forms. Its invisible challenge runs when you submit a protected form, on the basis of our legitimate interest in protecting accounts. See Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/turnstile-privacy-policy/.
• Amazon Web Services — application hosting and static asset delivery, in the Asia Pacific (Mumbai) region.
• Calendly — used only if you choose to book a call with our sales team; the details you enter go directly to Calendly.
• Content delivery networks — used to serve fonts, icons and stylesheets.

International transfers

Our infrastructure is hosted in the Asia Pacific (Mumbai) region, and some of our service providers process data in the United States. Where personal data is transferred out of the UK or the European Economic Area, we rely on the Standard Contractual Clauses approved by the European Commission, together with additional technical and organisational safeguards, to protect it.

A copy of the safeguards applying to a particular transfer can be requested through the contact page.

Retention

Account information is retained for as long as your account remains active. Meeting metadata and participation summaries are retained according to the retention period your organisation has configured.

Your privacy choice is retained for six months, after which you will be asked again. When you close your account, associated personal data is deleted or anonymised, except where a legal obligation requires us to keep it.

Your rights

Depending on your jurisdiction, you have the following rights over your personal information. We will respond within the period required by applicable law, and exercising them is free of charge.

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct information that is inaccurate or incomplete.
• Erasure — ask us to delete your personal data where no legal basis requires us to keep it.
• Restriction and objection — limit or object to processing carried out on the basis of our legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — change or withdraw your analytics consent at any time from the Cookie preferences link in the footer, as easily as it was given. Withdrawal does not affect processing carried out before you withdrew.
• Complain — lodge a complaint with your local data protection supervisory authority if you believe we have handled your data unlawfully.

Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means alone. Participation summaries and contribution scores are descriptive statistics about meetings you attended; they are not used by us to make decisions about you.

Security

Traffic is encrypted in transit, access to production systems is restricted and audited, and we apply least-privilege controls to internal tooling.

No platform can promise absolute security, but we work continuously to reduce risk and to disclose incidents promptly where they affect you, including notifying the relevant supervisory authority where the law requires it.

Children

Bridge is intended for workplace use and is not directed at children under 16. We do not knowingly collect personal information from children; if you believe a child has provided us with personal data, contact us and we will delete it.

Contacting us

Questions about this policy, requests to exercise any of the rights above, or concerns about how your information is handled can be sent through the contact page and will be routed to the team responsible for privacy at VAYUZ Technologies.