Legal / Data processing

Data processing notice.

A plain-English summary of what data we handle, why, how long we keep it, who we share it with, and how to exercise your rights under GDPR (EU/UK), India's DPDP Act 2023, and comparable regimes.

Controller

The Generative Bridge (TGB) is the data controller for information submitted through this site and any engagement we run. Reach us at privacy@thegenerativebridge.com.

Data categories & purposes
CategoryPurposeLegal basis
Contact details (name, email, company)Reply to enquiries, scope engagementsConsent / contract
Chat transcripts (with Yash)Answer questions, improve responsesConsent
Library / lead-magnet emailsDeliver requested resource, notify of related workConsent
Account data (auth ID, email)Sign-in, session managementContract
Server logs (IP, user agent, path)Security, abuse prevention, reliabilityLegitimate interest
Analytics events (only if you opt in)Understand which pages helpConsent
Retention
  • Enquiries and library captures: up to 24 months from last interaction.
  • Chat transcripts: up to 12 months, then anonymised.
  • Engagement records: for the term of the agreement plus 7 years for tax/audit.
  • Server logs: 90 days.
  • Backups: rolling 30-day window.
Subprocessors

We use a small set of vetted vendors under written agreements. Categories:

  • Application hosting and database (managed backend, EU/US regions).
  • Transactional email delivery.
  • AI inference gateway for the on-site assistant.
  • Error monitoring for uptime and reliability.

Full vendor list on request from privacy@thegenerativebridge.com.

International transfers

Data may be processed outside your country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

Your rights

You can request access, correction, deletion, portability, restriction, or objection. Under India's DPDP Act you may also nominate a person to exercise these rights on your behalf. We respond within 30 days.

Email privacy@thegenerativebridge.com with the subject line "Data request" and a description of what you'd like.

Cookies & tracking

Essential cookies (session, CSRF, load balancing) are always on. Analytics is opt-in via the banner and can be revoked any time by clearing site data or reopening the banner.

Grievance officer (India)

For DPDP-related grievances: Grievance Officer, TGB, privacy@thegenerativebridge.com.