Privacy Policy

Reportiva ("we", "us", "our") is a product of BRIDGES Technology Group. This Privacy Policy explains how we collect, use, store, and protect information when you use the Reportiva platform and associated services.

We process two categories of data: Account Data (information about your organization and its users) and Program Data (the field survey and monitoring data your organization collects through Reportiva). These categories are treated differently and this policy addresses both.

Account data

When you register an organization on Reportiva, we collect:

• Organization name, type, and contact information
• Administrator name and work email address
• Billing information (processed by our payment provider; we do not store card details)
• Usage logs for security and support purposes

Program data (your field data)

Program data is data your organization collects through Reportiva forms — survey responses, monitoring indicators, geolocation records, and other field data. This data belongs entirely to your organization. We process it solely to provide the service and have no independent rights over it.

Usage and technical data

We collect standard server logs, browser type, IP address, and feature usage patterns to maintain and improve the platform. We do not sell this data or use it for advertising.

We use account and usage data to:

• Provide, maintain, and improve the Reportiva platform
• Authenticate users and manage organization access
• Send service-related communications (account alerts, security notices)
• Respond to support requests
• Comply with legal obligations

We do not use your program (field) data for any purpose other than providing the service you have contracted for. We do not mine, analyze, or aggregate your program data for our own benefit.

All data is stored on encrypted infrastructure. Program data is isolated per organization — no data crosses between tenants. We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256).

Access to production data is limited to authorized personnel, logged, and audited. We conduct regular security reviews and maintain incident response procedures.

Data residency

By default, data is stored on cloud infrastructure located in [Region — to be specified]. Enterprise clients with specific data residency requirements may request alternative storage arrangements.

We retain account data for the duration of your subscription plus 90 days following cancellation, to allow for export and dispute resolution. After that period, account and program data is permanently deleted.

You may request deletion of your organization's data at any time by contacting us. We will complete deletion within 30 days of a verified request, subject to any legal retention obligations.

You can export all program data at any time using Reportiva's built-in export tools (Excel, CSV, PDF). We will never hold your data hostage or make export contingent on payment status.

We do not sell, rent, or share your data with third parties for their own purposes. We may disclose data:

• To service providers acting as data processors under our instruction (e.g. cloud infrastructure, email delivery) — subject to appropriate data processing agreements
• To comply with applicable law, regulation, or court order
• To protect the rights, safety, or property of Reportiva, our users, or the public
• In connection with a merger or acquisition, where your data would remain subject to this policy

Depending on your jurisdiction, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your data (subject to legal retention requirements)
• Objection to or restriction of certain processing
• Data portability — receiving your data in a machine-readable format

To exercise any of these rights, contact us at privacy@bridgesliberia.com. We will respond within 30 days.