Your privacy matters. We handle your information with care and transparency.

Bridge MD AI ("Bridge MD AI," "we," "us," or "our") is an AI-powered referral operations platform built for specialty medical practices, headquartered in Houston, Texas. We help healthcare organizations automate document intake, patient matching, EMR filing, and referral coordination.

For privacy questions or requests, contact us directly at hello@bridgemdai.com.

This policy applies to information collected through:

• Our website at bridgemdai.com and any related subdomains
• Demo requests, contact forms, and email communications
• Our platform and software services used by subscribed customers
• Marketing communications and social media interactions

Information you provide to us

• Business contact details — name, email, phone, and practice name when you fill out forms or contact us
• Account and billing details for subscribed customers
• Messages, questions, and support communications you send us

Information collected automatically

• Device and log data — IP address, browser type, operating system, and timestamps
• Usage data — pages viewed, clicks, session duration, and referral source
• Cookie identifiers and similar tracking technologies (see Section 6)

We use the information we collect to:

• Respond to inquiries, schedule demos, and provide customer support
• Deliver, operate, maintain, and improve our platform and website
• Process billing and manage business relationships
• Send transactional communications such as account updates and service notices
• Detect and prevent fraud, abuse, or security threats
• Comply with applicable laws and legal obligations
• Analyze aggregate usage to improve platform performance — we use de-identified data only for this purpose

We do not use your information to serve third-party advertising on our platform.

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers — Vendors who support hosting, security, analytics, billing, and communications, under confidentiality obligations
• Business customers — Information shared with authorized users within your organization as configured in the platform
• Legal compliance — When required by law, court order, or to protect the rights, safety, or property of Bridge MD AI or others
• Corporate transactions — In connection with a merger, acquisition, or sale of assets, subject to appropriate privacy protections

We use cookies and similar technologies to support site functionality, understand how visitors use our site, and improve the experience. Here is what we use and why:

Essential cookies

Required for the website to function — things like security, session handling, and load balancing. These cannot be turned off.

Analytics cookies

Help us understand which pages are visited, how long users stay, and where they come from. Disabled by default — only enabled with your consent.

Marketing cookies

Used for advertising tracking. We use these sparingly given our healthcare audience. Disabled by default — only enabled with explicit consent.

Bridge MD AI operates as a Business Associate under HIPAA when processing Protected Health Information (PHI) on behalf of Covered Entity customers. In those deployments:

• A signed Business Associate Agreement (BAA) must be in place before any PHI is transmitted
• PHI is processed solely to provide the contracted services — never for advertising or analytics
• We implement technical, administrative, and physical safeguards per the HIPAA Security Rule
• Breach notification procedures follow HIPAA Breach Notification Rule requirements

For HIPAA-specific inquiries, email hello@bridgemdai.com.

We take security seriously and implement safeguards including:

• Encryption in transit (TLS) and at rest for sensitive data
• Access controls and least-privilege role management
• Activity logging, monitoring, and anomaly detection
• Vendor security reviews and confidentiality agreements
• Incident response procedures with defined notification timelines

We retain information for as long as necessary to fulfill the purposes outlined in this policy, maintain business records, and comply with legal obligations. Specifically:

• Website inquiry and contact data — up to 3 years unless you request deletion
• Customer account and billing records — duration of the relationship plus 7 years for tax and legal compliance
• Platform data — per the terms of the subscription agreement; exportable on request within 30 days of termination before secure deletion

Depending on your location, you may have rights including:

• Access — Request a copy of personal information we hold about you
• Correction — Request correction of inaccurate information
• Deletion — Request deletion of your personal information, subject to legal retention requirements
• Opt-out of marketing — Unsubscribe from marketing emails at any time via the link in any email
• Cookie preferences — Manage cookie consent via the banner or footer link at any time

To submit a privacy request, email hello@bridgemdai.com. We respond within 30 days.

Our Services are designed for healthcare business professionals and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us at hello@bridgemdai.com and we will delete it promptly.

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date and, for significant changes, notify active customers by email or platform notice at least 14 days before the change takes effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.