1. Who we are
Data controller: AlphaBridge GmbH Address: [TODO: registered address, Germany] Privacy contact: privacy@alpha-bridge.co Support: support@alpha-bridge.co
2. What data we collect
We collect personal data depending on how you use the platform:
All users: name, email, account credentials, usage logs, IP address, device information.
Investors: company name, job title, investor type, compliance restrictions, call requests, billing information (when payments are enabled).
Experts: CV, portrait photo, LinkedIn profile, video screening answers, employment history, industries, restricted topics/companies, hourly rate, availability, call recordings and transcripts.
Calls: audio/video recordings, transcripts, timestamps, participant consent records, compliance flags.
3. Legal bases for processing
We process personal data under the following GDPR legal bases:
- Contract (Art. 6(1)(b)): account creation, expert matching, call scheduling, subscription delivery.
- Consent (Art. 6(1)(a)): call recording, marketing communications (where applicable), optional transcript library publication.
- Legitimate interest (Art. 6(1)(f)): platform security, fraud prevention, service improvement, compliance monitoring.
- Legal obligation (Art. 6(1)(c)): tax and regulatory record-keeping where applicable.
4. How we use your data
- Provide and operate the expert network platform
- Vet experts and match them with investor requests
- Record, transcribe, and store expert calls for compliance purposes
- Process payments and expert payouts (via Stripe, when enabled)
- Respond to support and privacy requests
- Comply with legal and regulatory obligations
5. Call recording
Expert calls are recorded and transcribed. All participants are informed before joining and must consent. Recordings are stored for compliance and audit purposes. See our Compliance Overview for details.
6. Automated processing
We use automated transcription (OpenAI Whisper) to convert call audio to text. Transcripts may be processed by automated tools for compliance screening. Human review may follow. This does not produce legal effects concerning you without human involvement.
7. Data retention
| Data type | Retention period |
|---|---|
| Account data | Duration of account + 3 years |
| Call recordings & transcripts | 7 years (compliance) |
| Expert application materials | Duration of relationship + 3 years; rejected applications deleted after 30 days |
| Consent records | Duration of account + 7 years |
| Billing records | As required by tax law (typically 10 years) |
8. Subprocessors
We use the following service providers to operate the platform:
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, storage | USA/EU |
| Google Cloud Storage | Call recording storage | EU/USA |
| LiveKit | Video conferencing | USA |
| OpenAI | Audio transcription | USA |
| Stripe | Payments (planned) | USA/EU |
We ensure appropriate safeguards for international transfers, including Standard Contractual Clauses where required.
9. Your rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten") where applicable
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with a supervisory authority
To exercise your rights, contact privacy@alpha-bridge.co. We respond within 30 days.
10. Security
We implement technical and organizational measures including encryption in transit, access controls, and audit logging. See our Compliance Overview for more detail.
11. Changes
We may update this Privacy Policy. Material changes will be communicated via email or platform notice. Continued use after changes constitutes acceptance of the updated policy.
12. Contact
AlphaBridge GmbH privacy@alpha-bridge.co https://alpha-bridge.co