Privacy Policy
Last updated: April 6, 2026
Knightian Labs Pte Ltd (“we”, “us”, or “our”) is the data controller for the Bridge Town platform and website at https://bridgetown.builders (the “Service”). This Privacy Policy describes how we collect, use, and protect your information when you use the Service.
1. Information We Collect
Account Information
When you sign up for Bridge Town, we collect:
- Auth0 profile data: your name, email address, and profile picture as provided via Auth0 or your OAuth provider (Google).
- Organisation information: your company or team name if provided during onboarding.
Financial Model Data
Bridge Town is a financial planning and analysis platform. When you use the Service, we store:
- Financial models and plans you create or import, including any data you upload (CSV, spreadsheets, etc.).
- Model code and version history stored in your tenant’s versioned project storage.
- Query results and snapshots generated by the DuckDB query engine from your data.
You retain ownership of all financial data you upload or create. We process it solely to provide the Service.
Usage Analytics
We collect anonymised usage data to improve the Service using PostHog, a product analytics platform. This includes:
- Pages visited and features used within the platform.
- Session duration and interaction patterns.
- Error logs and performance metrics.
PostHog uses cookies and similar tracking technologies to recognise returning visitors and maintain session continuity. This data does not include the content of your financial models. PostHog’s data processing is governed by PostHog’s Privacy Policy.
2. How We Store Your Data
Encryption and Security
- At rest: All data stored in our PostgreSQL database is encrypted at rest using AWS RDS encryption (AES-256).
- In transit: All communication between your browser and our servers uses TLS 1.2 or higher.
- Object storage: Files and snapshots stored in Amazon S3 use server-side encryption.
Tenant Isolation
Bridge Town enforces strict tenant isolation using PostgreSQL Row-Level Security (RLS). Your data is logically separated from other tenants’ data at the database level. Every query is automatically scoped to your organisation.
3. Third Parties We Share Data With
We use the following third-party services to operate the platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Auth0 | Authentication and identity management | Email, name, OAuth tokens |
| LLM provider(s) | AI-assisted model editing and analysis | Prompt text and model code you submit when invoking AI-assisted editing features |
| Google OAuth | Social login | Email and profile, per your Google account settings |
| PostHog | Product analytics and usage insights | Anonymised usage events, session data, browser/device metadata |
| Stripe | Payment processing and billing | Billing contact details, payment method (card details handled by Stripe directly) |
| Resend | Transactional email | Email address, for service notifications |
| Amazon Web Services | Cloud infrastructure (compute, storage, database) | All data at rest and in transit |
We do not sell your personal data to third parties. We do not use your financial model data to train AI models.
AI-assisted editing providers
Bridge Town supports AI-assisted model authoring and analysis workflows. When you invoke these features, the prompt text you provide and relevant model source may be processed by configured LLM provider(s).
We only send the information needed to fulfil your request, and we do not use your financial model data to train our own models.
PostHog Analytics
We use PostHog to understand how users interact with Bridge Town. PostHog collects anonymised event data (page views, feature clicks, session replays where enabled) using cookies stored in your browser. No financial model content is included in analytics events. PostHog may process data outside your jurisdiction; see PostHog’s Privacy Policy for details. You can opt out of analytics tracking by enabling “Do Not Track” in your browser settings.
4. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that inaccurate data be corrected.
- Deletion: Request deletion of your account and associated personal data. Financial model data will be deleted within 30 days of account closure.
- Data export: Export your financial models and data in standard formats (CSV, JSON, versioned project archive) via the account settings page.
- Objection: Object to certain processing activities.
To exercise any of these rights, contact us at privacy@bridgetown.builders.
5. Data Retention
- Account data: Retained for the duration of your subscription and for 90 days after account closure (to allow recovery).
- Financial model data: Deleted within 30 days of account closure upon request.
- Usage analytics: Retained in aggregated, anonymised form for up to 2 years. PostHog analytics cookies persist for up to 1 year.
- Billing records: Retained for 7 years as required by law.
6. Children’s Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice within the Service at least 14 days before the change takes effect. The updated “Last updated” date at the top of this page will always reflect the most recent revision.
8. Contact Us
For privacy-related questions or to exercise your rights, contact:
Knightian Labs Pte Ltd (trading as Bridge Town) Email: privacy@bridgetown.builders