Published by the partner institution. The authoritative copy is the original document; this page reproduces it for reference.
01Introduction
1.1 Who we are
In this Policy, “Bridge”, “we”, “our,” or “us” refers to the Bridge entity responsible for the collection, use, processing, and handling of Personal Data as described in this document, which includes Bridge Ventures LLC “BVL” and Bridge Building, Inc. “BBI.” Bridge and its affiliates, including Bridge’s parent company, Stripe LLC, provide fiat-stablecoin APIs and manage custodial wallet private keys, stablecoin-to-fiat conversions, and card programs.
1.2 Please read this Privacy Policy
This Privacy Policy describes our practices concerning the information we receive or collect when you visit our website located at bridge.xyz (“Website”) or access our online platform through the website of one of our partners (collectively, “Services”). Specifically, it describes the information we collect, how and for which purposes we may use such information, where we store it and for how long we retain the information, with whom we may share it, our use of tracking technologies and communications, our security practices, your choices and rights regarding such information, our policy concerning children, and how to contact us if you have any concerns regarding this Policy or your privacy. Please read this Privacy Policy and make sure that you fully understand and agree to it. If you do not agree to this Policy, please discontinue and avoid using our Services.
1.3 Third party links
Throughout our Services, we may link to other websites owned and operated by certain trusted third parties, including ones that help us perform identity verification or make additional products and services available to you. Those third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to those third-party websites, please consult their privacy policies as appropriate.
1.4 Changes to this Privacy Policy
Bridge will occasionally update this Privacy Policy. When we do, we will also revise the “last updated” date at the top of this page. Any changes to our Privacy Policy will become effective upon our posting of the revised Privacy Policy on the Website. Use of the Website following such changes constitutes your acceptance of the revised Privacy Policy then in effect. To the extent Bridge makes any material change to this Privacy Policy, it will provide you with notice via email, on the Website, or through the Services prior to the change becoming effective.
1.5 Definitions
Depending on the context, “You” might be a User, Representative, or a Visitor:
Users. Because Bridge does not offer service directly to the public, you must first have a valid account with a Bridge Partner to open a Bridge Account and access the Services. When you are not directly transacting with Bridge, but we receive your Personal Data in order to provide Services to you through a Business Partner, we refer to you as a “User”.
Representatives. When you are acting on behalf of an existing or potential Business Partner or Financial Partner, perhaps as a company founder, account administrator for a Business User, or a recipient of an employee credit card from a Business User, we refer to you as a “Representative” or “Business User.”
Visitors. When you interact with Bridge by visiting a Website without being logged into a Bridge account, or when your interaction with Bridge does not involve you being a User or Representative, or when you visit a Bridge office or other Bridge premises, we refer to you as a “Visitor.” For example, you are a Visitor when you send a message to Bridge asking for more information about our Services.
Bridge Employees means employees or contractors employed by the Bridge, its parent company Stripe, LLC or any of its affiliates.
Bridge Partners means legal entities that have entered into a service agreement with Bridge to integrate Bridge Services into their own applications or platforms.
Financial Partners means financial institutions, banks, and other partners such as payout providers, payment method providers, payment processors, crypto exchanges and card networks that Bridge partners with, directly or indirectly, to provide the Services.
Personal Data means any data which relates to a living individual who can be identified from that data or from that data and other information which is in the possession of, or is likely to come into the possession of, Bridge (or its representatives or service providers). In addition to factual information, it includes any expression of opinion about an individual and any indication of the intentions of Bridge or any other person in respect of an individual.
Privacy Policy means this privacy policy.
Services means the Bridge Website, our online platform (including APIs) made available through the website of one of our partners, the software, systems, and services made available under the Bridge User Terms, and any other online service or platform that Bridge provides users from time to time.
Service Provider means a business that we use to provide the Services, including cloud infrastructure providers, analytics providers to evaluate the performance, accuracy, and security of our Services; identity verification; fraud and sanctions screening; and customer support and audit functions.
Website means the Bridge website available at bridge.xyz and any other website made available by Bridge or its affiliates from time to time.
02Personal Data Collection
2.1 Personal Data we collect
The Personal Data we collect about you depends on the Services that you use and the particular activities carried out. Many of the Services offered by Bridge require us to obtain Personal Data about you in order to perform the Services we provide. Users may be unable to access the Services if such Personal Data are not provided.
We need certain Personal Data from you to verify your identity, to process your Bridge Account application, and to provide the Bridge Services to you. Your Partner may share your Personal Data with us with your permission, or we may collect it from you directly. Personal Data may include your name, email address, residential address, phone number, date of birth, and tax identification number, copies of your passport, driver’s license, military identification card or other government-issued photo identification; bank account statements; cryptocurrency wallet addresses you control, the purpose of your use of the Bridge Services, the source of funds you use to buy or sell Stablecoins, and related information we request. We may keep records of your Personal Data if required by a Financial Partners or by applicable law. The Personal Data you provide must always be accurate, complete and up to date.
2.2 User Data
If you are a User, we will collect and process the following Personal Data about you:
Information that you provide to us: This includes information about you that you provide to us. The nature of the services you are requesting will determine the kind of Personal Data we might ask for, though such information may include (but is not limited to):
basic Personal Data (such as first name; family name; date of birth; job role; email address; phone number; postal address; city; postcode; country; hashed password; national identification number, identity documents (including driver’s license, passport, or other government issued photo identification); proof of address documentation, payment information (such as banking information, wallet address, payment card details)); the purpose of your use of the Bridge Services, the source of funds you use to buy or sell Stablecoins, and related information we request.
any other information that you choose to share via the Services which may be considered Personal Data;
Information that we collect or generate about you. This includes (but is not limited to): technical information about your use of the Services e.g. sensor, location, connectivity, technical and aggregated usage data, such as your GPS/GNSS location data; home and work locations; IP addresses, wireless networks, cell towers and Wi-Fi access points; non-identifying data regarding a device, operating system, and browser; activity, communication, and performance logs; issues and bugs; and user activity on our Services. This data does not enable us to learn your true identity or contact details and serves mostly to improve the overall performance of our Services, and to better understand how our users typically use our Services and how we could improve their user experience. For more information on the cookies and other tracking technologies used by Bridge please see Section 9 of this Privacy Policy and our Cookie Notice below. To change your cookie preferences, click on the “Cookie Preference” link at the bottom of the Bridge home page.
Information we obtain from other sources. We may receive information about you from third parties. For example, we may receive information about you from outside records of third parties, such as identity information. We may supplement the information we collect about you through the Services with such information from third parties in order to verify your identity or enhance our ability to serve you. If we combine such data with information we collect through the Services, such information is subject to this Privacy Policy unless we have disclosed otherwise.
2.3 Representative Data
If you are a Representative of a Business Partner, we will collect the following Personal Data about you:
Registration and contact information. When you register for a Bridge account for a Business or Financial Partner (including incorporation of a Business), we collect your name and login credentials. If you register for or attend an event organized by Bridge or sign up to receive Bridge communications, we collect your registration and profile data. As a Representative, we may collect your Personal Data from third parties, including data providers, to advertise, market, and communicate with you.
Identification Information. As a current or potential Representative of a Business Partner, an owner or a shareholder, officer, or director of a Business Partner, we need your contact details, such as name, postal address, telephone number, and email address, and bank account information to fulfill our Financial Partner and regulatory requirements, verify your identity, and prevent fraudulent activities and harm to the Bridge platform. We collect your Personal Data, such as ownership interest in the Business User, date of birth, government-issued identity documents, and associated identifiers, as well as any history of fraud or misuse, directly from you and/or from publicly available sources, third parties such as credit bureaus and via the Services we provide. You may also provide us with bank account information.
We collect information from publicly available sources, third parties (such as credit bureaus), and via the Services we offer as part of the fraud prevention, detection, security monitoring, and compliance efforts for Bridge and its and its Business Partners. In some instances, we may also collect information about you directly from you, or from our Business Users, Financial Partners, and other third parties for the same purposes. Furthermore, to protect our Services, we may receive details such as IP addresses and other identifying data about potential security threats from third parties. Such information helps us verify identities, conduct credit checks where lawfully permitted, and prevent fraud.
Information we obtain from other sources. We may also receive information about you and your business from third parties. We may supplement the information we collect about you through the Services with such information from third parties in order to verify your identity, enhance our ability to serve you, or suggest products and services to you. If we combine such data with information we collect through the Services, such information is subject to this Privacy Policy unless we have disclosed otherwise.
2.4 Visitor Data
If you are a Visitor to our website, we collect the following Personal Data about you either provided directly by you or collected through our use of cookies and similar technologies. If you choose to complete a form on the Website, we collect the information you included in the form. This may include your contact information and other information pertaining to your questions about our Services. We may also associate a location with your visit. For more information on the cookies and other tracking technologies used by Bridge please see Section 9 of this Privacy Policy and our Cookie Notice below. To change your cookie preferences, click on the “Cookie Preference” link at the bottom of the Bridge home page.
2.5 Children Under 13 Years of Age
Our Services are not directed to children under 13 years of age, and we do not knowingly collect information from children under 13. If we become aware that a child under 13 has provided us with Personal Information, we will prohibit and block such use and will make all efforts to promptly delete any Personal Data stored with us with regard to such child.
03Personal Data Use
We use your Personal Data as necessary for the performance of our Services; for complying with applicable law; and based on our legitimate interests in maintaining and improving our Services and offerings, understanding how our Services are used, optimizing our marketing, customer service and support operations, and protecting and securing our users, ourselves, and members of the general public.
Specifically, we use Personal Data for the following purposes:
To facilitate, operate, and provide our Services;
To authenticate the identity of our users, and to allow them to access and use our Services;
To provide our users with assistance and support, including analyzing call recordings and call and chat transcripts for quality assurance, training, and operational purposes ;
To further develop, customize and improve the Services and your user experience, based on common or personal preferences, experiences, and difficulties, and support our efforts to make our Services more efficient, relevant, and useful to you;
To contact our users with general or personalized service-related messages (such as password-retrieval); or with promotional messages (such as newsletters, special offers, new features etc.); and to facilitate, sponsor and offer certain events and promotions;
To provide information about our Services and our affiliates’ services, invite you to participate in our events, surveys, or user research, or otherwise communicate with you for marketing purposes, in compliance with applicable law, including any consent or opt-out requirements.Services, perform research and quality assurance, and for training purposes;
To create aggregated statistical data, inferred non-personal data or anonymized or pseudonymized data (rendered non-personal), which we or our business partners may use to provide and improve our respective services;
To train artificial intelligence models to power our Services and protect against fraud and other harm;
To draw inferences from Transaction Data to reduce costs, fraud, and disputes and increase authentication and authorization rates for Bridge and our Business Users;
To help us identify and manage activities that could be fraudulent or harmful across our Services, enable our fraud detection Business Services, and secure our Services and transactions against unauthorized access, use, alteration or misappropriation of Personal Data, information, and funds. As part of the fraud prevention, detection, security monitoring, and compliance efforts for Bridge and its Business Users, we collect information from publicly available sources, third parties (such as credit bureaus), and via the Services we offer. In some instances, we may also collect information about you directly from you, or from our Business Partners, Financial Partners, and other third parties for the same purposes;
To meet our contractual and legal obligations related to anti-money laundering, Know-Your-Customer ("KYC") laws, anti-terrorism activities, safeguarding vulnerable customers, export control, and prohibition of doing business with restricted persons or in certain business fields, among other legal obligations.
To enforce our Terms of Service and any other agreements between you and Bridge; and
To comply with any applicable laws and regulations.
04Disclosure of your information to third parties
Payors and Payees. In connection with the Bridge Services, we may share some of your Personal Information with the business with which you are transacting in order to process your transaction.
Bridge Partners. If you access our online platform through the website of one of Bridge’s partners, then we may share your Personal Information with that partner.
Bridge Service Providers. We may engage selected third party companies and individuals to perform services complementary to our own (e.g. hosting and server co-location services, data analytics services, marketing and advertising services, data and cyber security services, fraud detection and prevention services, payment processing services, e-mail and SMS distribution and monitoring services, session recording, and our business, legal and financial advisors) (collectively, “Service Providers”). These Service Providers may have access to your Personal Information, depending on each of their specific roles and may use or disclose the Personal Data we make available to them to perform services on our behalf and to comply with relevant legal obligations. We require these Service Providers to contractually commit to security and confidentiality obligations for the Personal Data they process on our behalf.
Mobile Wallet Providers: Apple Pay, Google Pay, and Samsung Pay for push provisioning.
Blockchain Networks: Solana, Base, Ethereum, Optimism and other network operators where wallet transactions are recorded.
Payment Network Operators: Where transactions are processed via third-party payment networks or instant payment infrastructure (such as the FedNow® Service), we may share transaction data and fraud-related information with the operators of those networks as required by their applicable operating rules.
Subsidiaries and Affiliated Companies. We may share Personal Information internally within our family of companies, for the purposes described in this Policy.
Business Transfers. Should Bridge or any of its affiliates undergo any change in control, including by means of merger, acquisition, or purchase of substantially all of its assets, your Personal Information may be shared with the parties involved in such event. If we believe that such change in control might materially affect your Personal Information then stored with us, we will notify you of this event and the choices you may have via e-mail or prominent notice on our Services.
Regulators, Law Enforcement Agencies or other relevant governmental agencies: We may disclose or allow government and law enforcement officials access to certain Personal Information, in response to a subpoena, search warrant, or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we have a good faith belief that we are legally compelled to do so, or that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing.
Disclosure to Others to Protect Rights and Safety: We may share your Personal Information with others if we believe in good faith that this will help protect the rights, property, or personal safety of Bridge, any of our users, or any members of the general public.
With Your Permission. Bridge may share your Personal Information pursuant to your explicit consent.
05Location, Retention, and Security of Information
5.1 Location
Your Personal Information may be maintained, processed, and stored by Bridge and our authorized affiliates and Service Providers in the United States of America and other jurisdictions, as necessary for the proper delivery of our Services, or as may be required by law. While privacy laws may vary between jurisdictions, Bridge, its affiliates, and Service Providers are each committed to protect Personal Information in accordance with this Policy and industry standards, regardless of any lesser legal requirements that may apply in their jurisdiction.
5.2 Retention
We will retain your Personal Information for as long as you use the Services or as necessary to fulfil the purpose(s) for which it was collected, provide our products and services, resolve disputes, establish legal defences, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable law. If we are required to maintain a record of any information, you may not be able to delete such information due to such requirements. Please be aware that your personal information may be stored on backup tapes and locations, third-party servers, and other repositories that may not be erasable and residual information may be retained. We are under no obligation to store such information indefinitely and disclaim any liability arising out of, or related to, the destruction of such information.
Due to the inherent design of blockchain technology, data recorded on public blockchains (such as Solana and Base) is permanent, public, and immutable. This means that transaction histories and wallet addresses recorded on-chain cannot be altered or deleted by Bridge or any third party. If you submit a request to delete your personal data, please be aware that we cannot delete data that has been published to the public blockchain, as it is needed to maintain the integrity of the blockchain ledger. Instead, we fulfill deletion requests through a process of anonymization and decoupling. When a deletion request is processed, we will delete the off-chain personal data stored in our internal systems that links your real identity to your wallet address. Once this identifying link is destroyed, the remaining on-chain transaction data becomes effectively anonymous or pseudonymous, as it can no longer be technically or legally associated with you by Bridge. Additionally, please note that no personal data is used directly in on-chain functions, such as the minting process on our reserve ledgers.
5.3. Security
We maintain administrative, technical, and physical safeguards that are designed to protect the privacy and security of your Personal Information. For example, all information you provide is accessible only to designated staff. In addition, all information is protected by SSL/TLS encryption when it is exchanged between your web browser and the Website or via the Services. We note, however, that the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of information transmitted to our Website or via the Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. In addition, where you have chosen a password for access to certain parts of our Website, you are responsible for keeping this password confidential.
06Cookies and Tracking Technologies
6.1 What are Cookies
A cookie is a small text file which is placed onto your device (e.g. computer, smartphone or other electronic device) when you use our Services. When you visit a page on the Services it may generate any of the following types of cookies:
a. Essential Cookies: Essential cookies are required to save your session and to carry out other activities that are strictly necessary for the operation of the Services. They enable us to provide you with services you have specifically asked for and are essential for you to move around the Services and use its features, such as accessing secure areas of the Services. Without these cookies, services you have asked for cannot be provided to you. We also use security cookies to ensure the security of the Services. Because these cookies are strictly necessary to deliver the Services to you, you cannot refuse them. You can block or delete them by changing your browser settings, as described below in ‘Managing your cookies’. However, please note that if you do this you may not be able to use the full functionality of the Services.
b. Functional Cookies: Functional cookies allow the Services to remember choices you make on the Services (such as your user name, language or the region you are in) to provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customize. They may also be used to provide services you have asked for. These cookies cannot track your browsing activity on other websites. They also do not gather any information about you that could be used for advertising or remembering where you’ve been on the Internet besides our websites.
c. Performance Cookies: Performance cookies collect information about your visit and use of the Services, for instance, which pages you visit most often, and if you get error messages from such web pages. These cookies do not collect information that identifies you. All information these cookies collect is only used to improve how the Services works. We also use these cookies to understand how our media campaigns work. This information is used to evaluate and improve the content of the Services and our campaigns and ultimately to improve user experience.
d. Analytics Cookies: Analytics cookies help us understand how users access and use our services. The data collected typically includes information such as your IP address, your internet service provider, your web browser, the time spent on web pages, the links clicked and the advertisements viewed on those pages. We use this information to improve the Services and your experience, to see which areas and features of our services are popular, and for which visitors, and to count visits.
6.2 Other tracking technologies
We use other similar technologies to cookies on our Services such Web Beacons (also known as “clear GIFs”), which are transparent graphic images placed on a web page or in an email and indicate that a page or email has been viewed or tell your browser to get content from another server. We use web beacons to measure traffic to or from, or use of, our online forms, tools or content items and related browsing behaviour and to improve your experience when using the Services. We may also use customized links or other similar technologies to track hyperlinks that you click and associate that information with your Information in order to provide you with more focused communications.
Where we refer to ‘cookies’ in the reminder of this section, we are referring cookies or any other tracking technologies we use.
6.3 Managing Cookie Preferences
You can manage your cookie settings by clicking on the “Cookie Preferences” link at the bottom of the bridge.xyz homepage.
You may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
For further information on cookies generally, including how to control and manage them, visit https://allaboutcookies.org/.
6.4 Managing Other Communication Preferences
We want to communicate with you in the most effective manner, whether by sending you relevant marketing materials or by operating an intuitive and informative website. At the same time, we appreciate that your preferences regarding marketing, promotions, and online privacy will continue to evolve. This section provides you with information on how you can fine-tune your preference settings.
We may use your Personal Information to provide you with marketing or other promotional communications via mail or email. If, at any time, you would like to stop receiving these promotional e-mails, you may follow the opt-out instructions contained in any such e-mail or by contacting us as set out below in the “Contact Us” section. Please note that by opting out, you may prohibit Bridge from informing you of offerings that may be of interest to you. It may take up to ten (10) business days for us to process opt-out requests.
In addition, we may use your Personal Information to send you push notifications from time-to-time in order to update you about any events or promotions that we may be running. If you no longer wish to receive these types of communications, you may turn them off on your device.
07Automated Decision Making
7.1 Automated Decision-Making Technologies
We may use automated decision-making technologies, including profiling, to process your personal data in certain circumstances. This means decisions are made by electronic systems without manual human review. We use automated decision making for the following types of operations:
Identity verification (approving or rejecting users during KYC/KYB).
Automated sanctions screening (blocking accounts or transactions involving sanctioned entities).
Real-time transaction decisioning at the exact moment of authorization (including sufficient funds checks and fraud controls).
Anti-Money laundering transaction monitoring that can flag or restrict accounts
7.2 Your Rights
When a decision is made solely by automated means, you have the following rights:
Right to Explanation: You can request a detailed explanation of how your specific data was processed to reach a particular result.
Right to Human Intervention: You have the right to request that a human staff member reviews the automated decision.
Right to Contest: You may express your point of view and contest the decision
You can exercise these rights by contacting us at privacy@bridge.xyz.
08Accessing, Updating, and Correcting Your Information
8.1 Updating Your Information
If you are a registered user of the Services, you may update and correct your personal information and delete inaccuracies through your account. Specifically, you can review and edit specific types of information at any time by logging in to the Website or the Services and making changes.
8.2 Correcting Personal Data from Third Parties
Bridge may receive from its customers Personal Data about third parties (notably, payees) and may have no direct relationship with the individuals to whom that information relates. An individual who is not a Bridge registered user who seeks to access, correct, amend, or delete data provided to us by our customers should direct those requests to the customer as they will have access to that information through their own account. If requested to remove data, we will respond within a reasonable timeframe.
8.3 Sale
We do not sell personal data, but if you wish to opt out of the sharing of personal data in the future, please contact us via one of the methods outlined under the “Contact Us” section below.
09Other Websites
9.1 Social Media
You may also find additional information regarding the Services on our social media sites such as Facebook, LinkedIn, or Twitter. Please keep in mind that any information you share through such social media sites is visible to all participants on these social media sites and you should never post any sensitive information (such as account numbers) to such social media sites. Please carefully review the terms of use and privacy policies of these social media sites as they may be different from our own policies.
9.2. Other Websites and Businesses
This Privacy Policy covers the privacy practices of Bridge only. This Privacy Policy does not apply to the practices of third party websites, services, or applications, including third parties with which we partner. These third party services are governed by their own privacy policies. Bridge is not responsible for the privacy policies and practices of these third parties.
10Your Rights
10.1 Your California Privacy Rights
If you are a California resident (each a “California Party”), the following provisions apply to our processing of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“California Personal Information”). For California Parties, the provisions of this section prevail over any conflicting provisions in other sections of this Privacy Policy. We share, and in the past 12 months have shared California Personal Information such as California Parties use of our Online Services with our marketing and advertising partners for cross-contextual advertising and analytics purposes as further described below. Otherwise, we do not sell, and in the past 12 months we have not sold, California Personal Information. Additionally, we do not sell or share, and in the past 12 months we have not sold or shared, California Personal Information of individuals we know to be under 16 years of age.
We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:
Identifiers, such as a real name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. This category of information is collected from you, your devices, and third parties, and public databases. This category of data is collected from you and your devices.
Personal data described in subdivision (e) of Section 1798.80 (California customer records statute), such as a name, address, telephone number, credit card number, debit card number, or other payment data. This category of data is collected from you directly.
Characteristics of protected classifications under California or federal law such as age, gender, race, ethnicity or national origin. This category of data is collected from you when you choose to provide it to us directly or indirectly through our service providers and business partners as part of our surveys and market research.
Commercial data, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This category of data is collected from you and your devices.
Internet or other similar network activity, including, but not limited to, browsing history, search history, browser settings like language preference, and data regarding a California Party’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.
Geolocation data, including physical location or movements. This category of information is collected from you and your devices.
Inferences, such as a profile about a California Party’s preferences, characteristics, and behavior, drawn from information we collect and insights we receive from third parties such as our marketing and advertising partners and data analytics providers.
Sensitive personal data, such as account login information allowing access to an account, precise geolocation data, race, and ethnicity, in each case as further described above in the relevant categories. If you win a promotional prize or sweepstakes, we may also collect your W9 information, including FEIN or SSN for legal compliance. Please note we do not collect sensitive personal information for the purpose of inferring characteristics about you.
For each of the above categories, we use the California Personal Information for a variety of business purposes such as:
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
Helping to ensure security and integrity to the extent the use of a Consumer's personal information is reasonably necessary and proportionate for these purposes;
Debugging to identify and repair errors in our systems;
Short-term, transient use including contextual non-personalized advertising shown as part of a California Party’s current interaction with us;
Providing services on our behalf or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services;
Conducting internal research to develop and demonstrate technology;
Conducting activity to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide; and
Other business purposes described in the “How We Use and Share Information” Section.
We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which the California Personal Information was collected.
Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the “Disclosure of Personal Information” section above.
If you are a California Party, you have certain rights related to your California Personal Information, including:
The right to know what California Personal Information we have collected about you, including the categories of personal information, the categories of California Personal Information, the categories of sources from which the California Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing California Personal Information, the categories of third parties to whom we disclose California Personal Information, and the specific pieces of California Personal Information we have collected about you.
The right to correct inaccurate California Personal Information that we have collected about you.
The right to delete California Personal Information that we have collected from you, subject to certain exceptions required by applicable law.
The right to opt out of the sale or the sharing of California Personal Information.
We do not sell California Personal Information, but if you wish to opt out of the sharing of California Personal Information in the future, please contact us via one of the methods outlined under the “Contact Us” section below.
The right to limit the use or disclosure of your sensitive personal information. We do not use or disclose sensitive personal information for purposes that, under applicable law, require us to support the right to limit the use or disclosure of sensitive personal information.
The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by applicable law, including the right not to be retaliated against for the exercise of your rights.
You may request to exercise any of your rights under this Privacy Policy by contacting us via the methods noted under “Contact Us” below.
10.2 Other States
If you are a resident of a state in which state-level privacy law is enacted, additional rights described in this Section may apply to you. You may have the following rights, in each case to the extent set out in applicable law:
The right to confirm whether we process personal information about you and request access to such personal information (including, if applicable, in a portable and readily usable format).
The right to correct inaccuracies in certain personal information we may hold about you;
The right to request that we delete personal information collected from or about you; and
The right to limit the use or disclosure of your sensitive personal information. We do not use or disclose sensitive personal information for purposes that, under applicable law, require us to support the right to limit the use or disclosure of sensitive personal information.
You may request to exercise these rights by contacting us via the methods noted under “Contact Us” below. If your rights request is denied, you may lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and how you may exercise them.
As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, email address, the amount of your last transaction and the date of your last transaction to verify your identity in response to exercising requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights described above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
Under applicable law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent. If you are an authorized agent submitting a request on behalf of a consumer, please make a request as outlined below under “Contact Us”.
11Contact Us
If you have questions or concerns regarding, or a request to make pursuant to this Privacy Policy, please contact us by email at privacy@bridge.xyz or by mail to Bridge Building, Inc., 21750 Hardy Oak Blvd Ste 104 PMB 77950, San Antonio, TX 78258-4946 or to Bridge National Trust Bank, 28 Liberty Street, New York, NY 10005.
12U.S. Consumer Privacy Notice
The following Consumer Privacy Notice applies to you if you are an individual who resides in the United States and obtains financial services from Bridge primarily for your own personal, family, or household purposes.
Last updated: 6 October, 2026
Why?
What does Bridge do with your personal information?
Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?
What does Bridge do with your personal information?
The types of personal information we collect and share depend on the product or service you have with us. This information can include:
Social Security Number
Contact details
Account balances and transaction history
Payment, transaction, and purchase information and history
Credit reports and other information necessary to facilitate credit card issuing
When you are no longer our customer, we continue to share your information as described in this notice.
How?
What does Bridge do with your personal information?
All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Bridge chooses to share; and whether you can limit this sharing.
Reasons we can share your personal information
For our everyday business purposes - such as to process your transactions, detect fraud and prevent loss for you, us, as well as our Business Partners and Financial Partners, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus.
Does Bridge Share? Yes
Can you limit this sharing? No
For our marketing purposes - to offer our products and Services to you.
Does Bridge Share? Yes
Can you limit this sharing? No
For joint marketing with other financial companies.
Does Bridge Share? Yes
Can you limit this sharing? No
For our affiliates' everyday business purposes - information about your transactions and experiences.
Does Bridge Share? Yes
Can you limit this sharing? No
For our affiliates' everyday business purposes - information about your creditworthiness.
Does Bridge Share? No
Can you limit this sharing? We don't share
For our affiliates to market to you.
Does Bridge Share? No
Can you limit this sharing? We don't share
For nonaffiliates to market to you.
Does Bridge Share? Yes
Can you limit this sharing? Yes
To limit our sharing
Contact us using the information in the “Contact Us” section of this policy.
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice.
However, you can contact us at any time to limit our sharing.
Questions?
Contact us at privacy@bridge.xyz or by mail to Bridge Building Inc, 21750 Hardy Oak Blvd Ste 104 PMB 77950, San Antonio, TX 78258-4946 or Bridge National Trust Bank, 28 Liberty Street, New York, NY 10005.
Who we are
Who is providing this notice?
Bridge National Trust Bank, Bridge Building Inc., and their affiliates that provide consumer services in the U.S.
What we do
We provide fiat-stablecoin infrastructure and APIs.
How does Bridge protect my personal information?
To protect your personal information from unauthorized access, destruction, loss, alteration, or misuse we use security measures to comply with federal law. These measures include computer safeguards and secured files and buildings. We impose access controls along with ongoing monitoring to prevent data misuse, and we require our service providers to take similar steps to protect your information.
How does Bridge collect my personal information?
We collect your personal information, for example, when you
create a Bridge account;
access Bridge Services through our online platform;
We also collect your personal information from others, such as affiliates or other companies.
We also collect your personal information from others, such as affiliates or other companies.
Why can't I limit all sharing?
Federal law gives you the right to limit only
sharing for affiliates' everyday business purposes — information about your creditworthiness
affiliates from using your information to market to you
sharing for nonaffiliates to market to you.
State laws and individual companies may give you additional rights to limit sharing. See the Other Important Information section below for more information on your rights under state law.
What happens when I limit sharing for an account I hold jointly with someone else?
Your choices will apply to everyone on your account.
Definitions
Affiliates
Companies related by common ownership or control. They can be financial and nonfinancial companies.
Our affiliates include companies operating under the Bridge name, as well as our parent company, Stripe LLC, and its affiliates.
Nonaffiliates
Companies not related by common ownership or control. They can be financial and nonfinancial companies.
Nonaffiliates with which we share personal information include service providers that perform services or functions on our behalf, Business Users with which you choose to transact, partners with which we share data to provide you with services, and advertising partners, analytics providers, and social networks, who assist us in advertising our Services to you.
Joint Marketing
A formal agreement between non-affiliated financial companies that together market financial products or services to you.
Our joint marketing partners include financial companies we partner with to provide you with financial services.
Other important information
Vermont: If your account with us is associated with a Vermont billing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. For joint marketing, we will only disclose your name, contact information, and information about your transactions.
California: If your account with us is associated with a California billing address, we will not disclose Personal Data we collect about you except to the extent permitted under California law. For instance, we may disclose your Personal Data as necessary to process transactions or provide products and services you request, at your instruction, as required for institution risk control, and to safeguard against fraud, identity theft, and unauthorized transactions.