Privacy Policy

ContextBridge (“we”, “us”) provides an AI operations platform that helps businesses manage customer conversations, connect messaging and calendar integrations, and build an internal knowledge base of how their business runs. This policy explains what data we collect, how it’s used, and how it’s protected — for both business customers (“tenants”) who use ContextBridge and the end customers who message a tenant’s business through a connected channel.

From tenants (business accounts):

• Account details: name, business email, password (stored hashed, never in plain text).
• Business Brain content you provide: services, policies, FAQs, uploaded documents, and any other information you give ContextBridge to describe how your business operates.
• Integration credentials for channels you connect (WhatsApp Business, Facebook/Instagram Messenger, Google Calendar) — access tokens are encrypted at rest and only used to send/receive messages or calendar events on your behalf.

From end customers messaging a connected business:

• Message content and metadata (phone number, name, timestamps) needed to carry on a conversation and generate a relevant AI-assisted reply.
• Calendar booking details when a conversation results in a scheduled appointment.

• To operate the core product: routing messages, generating AI replies, and surfacing them to a tenant’s team.
• To improve reply quality for a specific tenant using that tenant’s own Business Brain content — data from one tenant is never used to answer another tenant’s customers.
• To send account and operational notifications (e.g. an escalated conversation needing attention).
• To maintain security, prevent abuse, and meet legal obligations.

Message content may be sent to a third-party AI provider (currently Google Gemini) to generate replies. We do not sell personal data to third parties, and do not use tenant data to train models outside of generating that tenant’s own replies.

We share data only with the service providers needed to run ContextBridge — our AI provider for generating replies, our hosting infrastructure, and Meta/Google APIs strictly to deliver messages or calendar events you’ve authorized. We do not sell or rent personal data.

Tenant account data and Business Brain content is retained for as long as the account is active. Conversation history is retained to preserve context for future replies and for the tenant’s own records.

To request deletion of your data — as a tenant closing an account, or as an end customer who messaged a business through ContextBridge — contact us at the address below. We will delete or anonymize the relevant data within a reasonable time, except where retention is required by law.

Integration credentials (WhatsApp, Messenger, Google Calendar tokens) are encrypted at rest. Access to tenant data is isolated per tenant at the database level. All traffic to ContextBridge is encrypted in transit via HTTPS.

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us at the address below to exercise these rights.

We may update this policy as the product evolves. Material changes will be reflected by updating the date at the top of this page.

Questions about this policy, or requests regarding your data, can be sent to privacy@contextbridge.net.