BRIDGE · Legal & Privacy

Privacy Policy

Last updated: May 12, 2026  ·  Effective: May 12, 2026

Overview

BRIDGE is an operations intelligence platform built by Michael Labs. We collect only the information needed to operate the service, deliver the features you request, and meet our obligations to you. We do not sell your data.

This Privacy Policy describes how Michael Labs (“Michael Labs,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the BRIDGE platform, including any associated web, macOS, and iOS applications, APIs, and related services (collectively, the “Service”).

By accessing the Service, submitting a contact request, or otherwise using BRIDGE, you agree to the practices described in this Policy and to our Terms of Service.

Information We Collect

Information You Provide

When you contact us, register for the Service, or use BRIDGE, you may provide:

  • Identity & contact data: name, email address, phone number, business name, mailing address, customer ID, job title.
  • Account credentials: usernames, passwords, multi-factor authentication tokens, and role assignments.
  • Business operations data: jobs, invoices, vendor records, customer records, journal entries, KPIs, attachments, and other operational data you upload, import, or generate within BRIDGE.
  • Communications: messages, support requests, demo inquiries, and any content you send to us by email, SMS, or through the Service.
  • Consent records: records of opt-ins for SMS messaging, email communications, and other consents required by law.

Information Collected Automatically

When you access the Service, we automatically collect limited technical information to keep BRIDGE running, secure, and performant:

  • Device identifiers, operating system, browser type and version, and screen size
  • IP address and approximate geographic region derived from it
  • Log data including timestamps, request URLs, response codes, and referrer URLs
  • Authentication and session tokens
  • Crash reports and diagnostic information
  • Usage analytics, including which features are accessed and how often

We use cookies and similar technologies (local storage, session storage) to maintain your session, remember preferences, and analyze usage. You can control cookies through your browser settings, but disabling them may limit functionality.

Information From Integrated Platforms

If you connect BRIDGE to a third-party platform such as your accounting or job management system, we receive data from that platform on your behalf. See the Third-Party Integrations section for details on what we access and how.

How We Use Your Data

We use the information we collect for the following purposes:

  • Service delivery: operating BRIDGE, syncing your data with integrated platforms, executing approval workflows, generating reports, and providing the features you request.
  • Account management: authenticating users, applying role-based permissions, and providing audit trails.
  • Communications: responding to inquiries, scheduling demos, sending account notifications, and (with consent) SMS messages.
  • Improvement and analytics: understanding how BRIDGE is used so we can prioritize features, fix issues, and improve performance.
  • Security and fraud prevention: detecting unauthorized access, abuse, and security incidents.
  • Compliance: meeting our legal, regulatory, tax, and contractual obligations.

We do not sell your personal data. We do not use your business operations data to train machine-learning models without your explicit written consent.

SMS & Text Messaging

If you provide a phone number and check the SMS consent box on a Michael Labs form, you consent to receive text messages from Michael Labs / BRIDGE related to your inquiry, demo scheduling, account updates, service notifications, and other transactional or service-related communications.

Consent

Consent to receive SMS messages is voluntary and is not a condition of purchase or use of any Michael Labs product. You may opt out at any time without affecting your access to the Service.

Frequency, Rates & Help

Message frequency varies based on your activity and requests. Standard message and data rates may apply, depending on your carrier and plan. Carriers are not liable for delayed or undelivered messages. Reply HELP for help or contact us at hello@michaellabs.org.

Opt-Out

Reply STOP to any text message at any time to opt out. You will receive one final confirmation message and no further texts will be sent. You may re-enroll at any time by submitting a new contact request and providing consent.

No Sharing of Mobile Information

We do not share mobile information or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. Information sharing is limited to the service providers (such as our SMS delivery vendor) who help us deliver the messages you have consented to receive. SMS opt-in data is treated separately from any other data sharing.

Data Sharing

We do not sell, rent, or trade your personal information. We share information only in the limited circumstances below:

Service Providers

We work with vetted third-party vendors who help us operate BRIDGE. These vendors are contractually required to use your data only as needed to provide their services to us, including:

  • Infrastructure: cloud hosting, database, content delivery, and backup providers
  • Communications: SMS delivery, email delivery, and customer support tools
  • Analytics & monitoring: error tracking, performance monitoring, and usage analytics
  • Identity & security: authentication, fraud prevention, and security monitoring

Integrated Platforms

When you connect BRIDGE to a third-party platform you control (such as your accounting system), BRIDGE exchanges data with that platform on your behalf based on the connection scope you authorize.

Legal Requirements

We may disclose information if required by law, court order, subpoena, regulatory request, or to protect the rights, property, safety, or integrity of the Service, our users, or the public.

Business Transactions

If Michael Labs is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to the protections of this Policy.

Aggregated & De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for analytics, research, and reporting purposes.

Third-Party Integrations

BRIDGE connects to third-party platforms that you control. When you authorize an integration, BRIDGE accesses only the data scopes you approve, and uses that data only to provide the features you request.

  • Accounting platforms (e.g. QuickBooks Online): read and write access to invoices, vendors, accounts, customers, payments, journal entries, and other records required to deliver BRIDGE functionality.
  • Job management platforms: read access to jobs, projects, and related records via supported APIs or data exports.
  • Identity providers (e.g. Microsoft Entra ID / Azure AD): single sign-on, user provisioning, and group sync.

You may revoke an integration at any time through BRIDGE administrative settings or directly with the third-party platform. Tokens and credentials we store on your behalf are encrypted at rest.

Third-party platforms have their own privacy policies and terms governing how they handle your data. Their practices are not controlled by Michael Labs.

Data Security

We implement administrative, technical, and physical safeguards designed to protect your data, including:

  • Encryption of data in transit (TLS 1.2+) and at rest
  • Encryption of stored credentials and OAuth tokens using industry-standard cryptography
  • Role-based access controls and least-privilege provisioning for internal personnel
  • Multi-factor authentication for administrative and customer accounts
  • Audit logging of access to sensitive data and configuration changes
  • Regular security reviews and dependency monitoring

No method of electronic storage or transmission is 100% secure. While we use commercially reasonable safeguards, we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you in accordance with applicable law.

You are responsible for safeguarding your account credentials and for the activity that occurs under your account.

Your Rights & Choices

Access, Correction & Deletion

You may access, correct, export, or request deletion of your personal information by contacting us at hello@michaellabs.org or through the in-app account settings where available. We will respond to verified requests within the time period required by applicable law.

Communications Preferences

You may opt out of marketing emails by following the unsubscribe link in any marketing message. You may opt out of SMS by replying STOP to any message. Transactional and service-related communications cannot be opted out of while you maintain an active account.

California Residents (CCPA / CPRA)

California residents have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

European & UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have rights including access, rectification, erasure, restriction, portability, and objection. Our lawful bases for processing typically include performance of a contract, legitimate interest, and consent (for SMS and marketing). Contact us to exercise your rights.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we retain certain records to comply with legal, tax, accounting, and audit obligations, and to enforce our agreements. Backups containing your data may persist for a limited period after deletion, after which they are overwritten in the normal course of operations.

Children’s Privacy

BRIDGE is intended for business use and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you by email or through the Service. Your continued use of BRIDGE after updates take effect constitutes your acceptance of the revised Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, we are here to help.

Get in Touch

Email us at hello@michaellabs.org. We respond to privacy inquiries within 5 business days.