Privacy Notice

This Privacy Notice is issued by AUDAWORKS, operating commercially as BridgeMeet, with registered address in Mexico City. It is governed by the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), published in the Federal Official Gazette on March 20, 2025, and its applicable regulations. The competent authority for the private sector is the Ministry of Anti-Corruption and Good Governance.

We process personal data lawfully, fairly, and transparently, and we apply security measures to protect it throughout its lifecycle.

3.1 Primary purposes

3.2 Secondary purposes

3.3 Legal basis

For the personal data of a business's own customers, the business is the Data Controller and BridgeMeet acts as its Data Processor, handling that data only to provide the service and on the business's instructions.

For the personal data of business owners and staff who register on the platform, BridgeMeet is the Data Controller, since we determine how and why that data is processed.

When a business enables our AI assistant, the content of the customer's WhatsApp messages, the business's list of services and staff, and the customer's name are sent to our AI provider, Anthropic, for the sole purpose of generating a scheduling reply.

The assistant helps schedule appointments. It does not make legally significant decisions about a person without human oversight, and the business can review and correct how it behaves.

BridgeMeet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request access to your Google Calendar only to provide the scheduling features you enable. Specifically, we read your calendars and their events, including busy and free times, to find open slots, and we create, update, and delete calendar events for the appointments booked through BridgeMeet. Those events include the customer's name, the selected service, and the appointment notes.

The Google Calendar authorization (access and refresh tokens) is held securely in BridgeMeet's own encrypted credential store, isolated per business account, and is used only while you keep the calendar connected. You can disconnect it at any time. We do not use Google Calendar data for advertising, we do not sell it, and we do not use it to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. We do not transfer this data to others except as needed to provide the feature at your request, to comply with applicable law, or as part of a merger or acquisition, consistent with the Limited Use requirements.

Because clinics, dental offices, and veterinary practices use BridgeMeet, appointment notes and messages may include health-related information. We treat this as sensitive data, apply enhanced safeguards, and use it only to manage the appointment.

When a business processes health data, it does so as Data Controller and is responsible for obtaining the customer's express consent, in accordance with Article 8 of the LFPDPPP and other applicable provisions on sensitive personal data.

We keep each business's data logically separated so one business cannot access another's, encrypt sensitive credentials so that not even our own team can read them, and restrict internal access to what each role needs.

If a security incident affecting personal data occurs, we will act to contain it and notify affected parties as required by applicable law.

We keep personal data for as long as your account and our relationship are active, and for any additional period the law requires us to retain it, for example tax records.

You can ask us to access, correct, or delete your data at any time through the process in the Privacy Rights section, and we respond as the law provides. When a team member is removed, their record may be kept in a deactivated state for continuity and audit.

You may exercise your rights of Access, Rectification, Cancellation, and Objection (ARCO), and withdraw consent you previously gave.

Owners and staff can update their profile details from the dashboard. Customers of a business exercise their rights directly with that business, which acts as the Data Controller.