Almost nothing,
and not for long.
AI Bridge runs on your Mac with no telemetry, so there is very little to say. The personal information we handle is an email address you choose to give us and, if you sign in or buy a plan, your account and its plan. This page says exactly what, why, where it goes and for how long.
Each section opens with a one-line summary. The full text beneath each one is the policy.
Contents · 18 sections
- 01Who we are
- 02What the app sends us
- 03Your agents and connected services
- 04What this website collects
- 05Technical information
- 06Your AI Bridge account
- 07When you buy a plan
- 08What we never collect
- 09Why we use it
- 10Who else handles it
- 11How long we keep it
- 12Where it is processed
- 13Security
- 14Your rights
- 15Cookies
- 16Children
- 17Changes to this policy
- 18Contact
01Who we are
In short: AI Bridge sh, an Australian business, is responsible for the little personal data AI Bridge handles.
AI Bridge is made by AI Bridge sh (ABN 15 662 475 381), an Australian business (“we”, “us”). We are responsible for the personal information described here, and are the “controller” of it for the purposes of the GDPR. We handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). You can reach us about anything in this policy at hello@aibridge.sh.
02What the app sends us
In short: Nothing about your work. It checks for updates and, once you sign in, checks your plan about once a day.
AI Bridge has no telemetry, no analytics and no crash reporter. Your workspaces, history, approval records and settings stay in plain files in a folder on your machine, and we never receive them. You can use it without an account.
The application makes these requests of its own, and none of them is about your work:
- Update check. When it launches, it asks GitHub, where our releases are published, whether a newer version exists, and downloads it if so. GitHub sees the request as it would any download, including your IP address.
- Signing in. Only if you sign in, it sends us a one-way identifier of your Mac (a hash, not its serial number), your Mac’s name, the app’s version and a random id for this installation, so that your plan can be tied to this Mac.
- Plan check. Once you are signed in, about once a day, it sends us the same Mac identifier and the app’s version, with this Mac’s sign-in token, and receives the licence for your plan.
To count what Free includes, the application keeps a small record in its own data folder and in your macOS Keychain: for each cluster, database server and Slack channel you used in the last 30 days, a one-way hash of its address and the date; the copy in the data folder also keeps its name so the application can show it to you. This record never leaves your machine.
Two things are sent only when you use them. Send feedback posts what you wrote, with the system information it shows you first and never a log, as an issue on our public GitHub repository from your own GitHub account, or in an email you send us. “I want this” on a feature that is coming records, against your account, which feature you want and whether you asked to be emailed when it ships.
03Your agents and connected services
In short: What you send to Anthropic, OpenAI, Slack or your own clusters goes straight there, never through us.
The AI agents AI Bridge runs talk directly to their own providers — Anthropic, OpenAI, xAI and others — using your accounts and under those providers’ privacy policies. The same is true of anything you connect: your Slack workspace, Git hosts, Kubernetes clusters and databases. That traffic goes from your machine to them. It never passes through us, and we cannot see it. Credentials you give AI Bridge are stored on your machine.
04What this website collects
In short: Only what you type into its form: an email address, and an optional note.
This site is a marketing page with one form on it. The waiting list (“Join the waitlist”) collects your email address and, if you fill it in, what you would point your agents at. We use the address to email you once, when there is a build to install, and the note to understand who it is for. If we let you in early, your address is added to the list of addresses that may sign in before launch.
The form has no hidden fields, and reads nothing from your browser to go with what you typed. A submission is sent to our internal team inbox and nowhere else. It is not written to a database, and not passed to an email-marketing platform or an advertising network.
We will not add you to a newsletter or a sequence. Ask us to remove you and we will, without asking why.
05Technical information
In short: Your IP address, counted in memory to stop abuse and never saved. No cookies from us. Visits are counted, not tracked.
Rate limiting. When you submit a form, the server reads the connecting IP address to rate-limit submissions. It is held only in the server’s memory, counts toward a limit for one hour, is never written to disk or attached to your email address, and is gone whenever the server process restarts, which on our host happens often.
Bot protection. The forms are protected by Cloudflare Turnstile, in invisible mode: it tells a person from a script without showing you a puzzle, and without the cross-site tracking a conventional CAPTCHA does. To do that, Cloudflare processes some technical information from your browser and may set a cookie for the check. Their terms for it are the Turnstile Privacy Addendum.
Visit counts. We count page views with Cloudflare Web Analytics, chosen because it works without cookies, without fingerprinting and without following anyone between sites. It records that a page was viewed, roughly where from and what linked to it — enough to know whether anybody is reading, and nothing that identifies who.
Hosting. The site runs on Cloudflare, which as our host processes each request and keeps its own short-lived operational logs, as any host does. We keep no separate log of who visited.
06Your AI Bridge account
In short: Only if you sign in: your email, your name, the sign-in you used, your Macs, your team and your plan.
You need an account only for a trial or a paid plan. It lives on our account site, account.aibridge.sh, and holds:
- From the sign-in you choose (GitHub, Google, Microsoft or GitLab): its id for you, the verified email addresses it reports, your display name and, for GitHub and GitLab, your username. We never receive your password for it.
- For each Mac you sign in on: its one-way identifier, its name, the app’s version, the country the sign-in came from (worked out from the connection, nothing finer) and when it last checked in. We keep only a hash of each Mac’s sign-in token, never the token.
- If you are on a team: the team’s name, who is on it and in what role, when each person joined and left, and the email addresses invitations were sent to.
- Your plan: what you bought, its seats and status, any refunds, and for each paid period the invoice, the plan, the period it covered and when it was paid — to work out whether you have kept your version.
- The features you asked for with “I want this”, and whether you want an email when they ship.
- A record of account events — a Mac added or removed, a team change, a payment — kept to secure the account and to answer questions about it.
We email you only about your account: an invitation when a team admin invites you, and a notice when a new Mac signs in to your account, when someone joins your team, or when you are removed from one. Receipts and payment emails come from Stripe. Before launch, a sign-in from an address that is not on the early-access list is turned away, and nothing about it is stored.
07When you buy a plan
In short: Stripe takes your payment. We get what we need to give you your plan — never your card.
Purchases are handled by Stripe through Stripe Managed Payments, under which Stripe is the merchant of record: it collects your payment details, billing address and tax information under Stripe’s own privacy policy. We never see or store your card number.
Stripe shares with us what we need to give you your plan and support you: your customer record, the plan and seats you bought, your subscription’s status and the invoices that paid for it. The licence your Mac receives carries your account and Mac ids, your plan and its dates; it stays on your machine.
08What we never collect
In short: Your code, prompts, terminal output, credentials, usage and location. None of it.
- Your code, files, prompts, agent conversations or terminal output.
- Credentials, API keys, kubeconfigs or database connection strings.
- How, when or how much you use the application.
- Your card number or bank details.
- Cross-site browsing history, advertising identifiers or a profile of you.
- Anything to train AI models on. We do not train models.
09Why we use it
In short: To send the email you asked for, give you your plan, run your account, help you, and keep the form free of bots.
We use the information above only to:
- email you about AI Bridge when you have asked us to (your consent);
- run your account and team, give you your trial or plan and its licence, email you about your account, and support you (to perform our agreement with you);
- keep the form and the account secure and free of abuse, and know whether the site is read (our legitimate interests, which do not override yours);
- keep the records tax and accounting law requires (legal obligation).
We do not sell or rent personal information, share it for advertising, or use it for automated decisions that affect you.
11How long we keep it
In short: Not long, and never longer than the reason for keeping it.
| Information | Kept for |
|---|---|
| IP address, for rate limiting | In memory only; counts for one hour, gone when the server restarts |
| Waiting-list email | Until launch, then 12 months, or until you ask us to remove it |
| Your account, Macs, team and feature requests | While your account exists. When you ask us to delete it, it is deleted, and our backup copies age out within 30 days |
| Plan and purchase records | While your account exists, then as long as tax law requires |
| The account site’s sign-in cookie | 30 days, or until you sign out |
| Visit counts | Aggregated by Cloudflare; nothing that identifies you |
12Where it is processed
In short: We are in Australia; our providers operate worldwide, including the United States.
We are based in Australia, and our providers process information in other countries, including the United States and the European Union. When personal information from the EU, UK or Switzerland is transferred, we rely on our providers’ Standard Contractual Clauses or an equivalent lawful mechanism, and we take reasonable steps under Australian Privacy Principle 8 to ensure overseas recipients protect it.
13Security
In short: We hold very little, which is the best protection there is.
All traffic to this site and to our providers is encrypted in transit. Access to what we hold is limited to the people who make AI Bridge. Licences are cryptographically signed and bound to one Mac, so a forged, altered or copied licence cannot pass the application’s check.
If a breach of personal information we hold is likely to cause you serious harm, we will tell you and the relevant regulator as the law requires — under the Notifiable Data Breaches scheme and, where it applies, within 72 hours under the GDPR.
14Your rights
In short: Ask for a copy, a correction or deletion, and it is done. Wherever you live.
Wherever you are, you can ask us to show you what we hold about you, correct it, delete it, or stop emailing you. Because what we hold is usually a single line with your address on it, this is a short conversation. Email hello@aibridge.sh; we reply within 30 days, and usually much sooner. We may need to confirm the request comes from you.
Australia. You have rights of access and correction under the Privacy Act 1988. If you are unhappy with how we handled a complaint, you can contact the Office of the Australian Information Commissioner.
EU, UK and Switzerland. You also have the right to data portability, to restrict or object to our processing, and to withdraw consent at any time, and to complain to your local data-protection authority.
California. You have the right to know, delete and correct personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in the CCPA.
16Children
In short: AI Bridge is not for anyone under 18.
AI Bridge is a professional tool and is not directed at anyone under 18. We do not knowingly collect personal information from children, and if we learn we have, we delete it.
17Changes to this policy
In short: If what we collect changes, this page changes first, and the date at the top moves.
When what AI Bridge collects changes, this page changes with it, in the same release. The date at the top shows when it last changed. If a change means we would use information we already hold in a new way, we will tell you by email before it applies and ask for your consent where the law requires it.
18Contact
In short: hello@aibridge.sh — for a copy, a removal, or a question.
AI Bridge sh (ABN 15 662 475 381) · hello@aibridge.sh. The terms you use AI Bridge under are in the terms of service.