Privacy Policy

1. Who We Are

Bridge ("we", "us", "our") is a B2B SaaS platform that helps Indian driving schools digitise admissions, automate workflows, and grow revenue. This policy explains how we collect, use, store, and protect information when you use our website and services.

2. Information We Collect

a) Account & Business Information

When a driving school signs up, we collect: school name, branch addresses, WhatsApp phone numbers, and staff details (name, phone, role). Branch Managers may undergo Aadhaar-based identity verification and Instructors may undergo Driving License verification via our third-party provider, Surepass.

b) Student & Lead Data

Driving schools input student and prospect data into Bridge, including: name, phone number, Aadhaar number (for KYC), payment records, and training schedules. This data is entered and controlled by the driving school (the data controller); Bridge processes it on their behalf.

c) Usage Data

We collect standard analytics data: pages visited, browser type, device information, and IP address to improve our service.

3. How We Use Your Information

• Providing and maintaining the Bridge platform
• Processing Aadhaar and Driving License verification via Surepass
• Sending WhatsApp messages on behalf of driving schools (lead follow-ups, payment receipts, session reminders, marketing campaigns)
• Generating analytics and reports for driving school admins
• Improving our product and user experience
• Complying with legal obligations

4. WhatsApp Messaging

Bridge sends WhatsApp messages on behalf of driving schools using the WhatsApp Business Platform, integrating directly with Meta Platforms. Automated messages (lead follow-ups, quotes, reminders, receipts, and promotional campaigns) are sent either from a shared Bridge-operated business number or, where a school has connected its own number, from that school's number. In both cases the sending number and its display name are shown in the message, and the school on whose behalf the message is sent is identified in the message content.

Message recipients may opt out of marketing messages at any time, either through WhatsApp's own controls or by replying to a message. We record opt-outs and stop sending marketing messages to that number. Transactional messages relating to an existing enrolment, such as payment receipts and session reminders, may continue.

All message templates are submitted to and approved by Meta, and comply with the WhatsApp Business Messaging Policy.

5. Managing Business Accounts on Behalf of Our Customers

Where a driving school authorises us to do so, Bridge accesses and manages that school's business messaging assets on its behalf, including its WhatsApp Business Account, business phone numbers, and message templates. Access is granted by the school through Meta's own authorisation flow and can be revoked by the school at any time.

We use this access solely to operate the Bridge platform for that school. We do not use one customer's data or messaging assets for the benefit of another customer, and we do not use data obtained from Meta for advertising, resale, or any purpose beyond providing the service the school signed up for.

6. Third-Party Services

We share data with the following categories of providers:

• Identity verification: Surepass (Aadhaar via DigiLocker, Driving License verification)
• Messaging: Meta Platforms, Inc. (WhatsApp Business Platform) for automated communications. We integrate directly with Meta rather than through a reseller. Message content, recipient phone numbers, and delivery status are processed by Meta under its own terms.
• Payments: UPI payment processors
• Hosting & infrastructure: Cloud service providers

We do not sell personal data to third parties.

7. Data Retention and Deletion

We retain data for as long as the driving school's account is active. Upon account termination, we delete or anonymise all associated data within 90 days, unless retention is required by law.

Requesting deletion. To request deletion of your personal data, email hi@vinaynair.dev with the subject "Data deletion request", from the email address associated with your account or including the phone number the data relates to. We acknowledge requests within 7 days and complete verified deletions within 30 days.

If you are a student or lead rather than a driving school, your data was entered by the school you enquired with, and that school is the data controller. You may contact us at the address above and we will forward your request to them and act on their instruction.

8. Chrome Extension ("Bridge - Sarathi Auto-Fill")

Our Chrome extension accesses sarathi.parivahan.gov.in to auto-fill driving licence application forms using student data already stored in Bridge. The extension authenticates via your existing Bridge account and does not collect, store, or transmit any additional data beyond what is described above. No data is read from the Sarathi portal. The extension requires cookies permission solely for authentication and does not track browsing activity.

9. Data Security

We implement industry-standard security measures including encryption in transit and at rest, role-based access controls, and tenant isolation to protect your data. Aadhaar data is handled in compliance with UIDAI guidelines.

10. Your Rights

Under India's Digital Personal Data Protection Act (DPDP), 2023, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data
• Withdraw consent for data processing
• File a grievance with us or the Data Protection Board

If you are a student or lead, please contact your driving school directly, as they are the data controller for your information.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email or in-app notification.

12. Contact

For privacy-related inquiries, reach us at hi@vinaynair.dev