Participant and booking privacy.

Who is responsible

Public operating name: Bracket Bridge
Mailing address: 30 N Gould St Ste R, Sheridan, WY 82801, United States
Point of contact: Hugo Albert
Email: support@bracketbridge.com

For client-led studies, the client may be the controller and Bracket Bridge may act as processor, service provider, or operations partner. The project notice or written agreement identifies the actual roles for that study.

Data we collect on the booking page

• Name, phone number, optional email, optional notes, selected language, number of participants, selected availability, referral code, booking code, and appointment-management records.
• Payment and referral administration records, such as reward amount, payout status, eligibility checks, referral attribution, and payout contact details if collected separately.
• Basic technical and security logs, such as IP address, browser or device information, requested URL, timestamps, and error events.
• Local browser cache and service-worker data used to make the participant tool load reliably. The booking page does not use advertising pixels or third-party marketing analytics scripts.

Project and study data

Depending on the study, project data may include audio or voice recordings, language and accent samples, transcripts, prompts, task responses, human feedback, annotations, agent trajectory data, interaction logs, screen or tool-use sequences, eligibility details, limited demographics, payment administration records, and quality-control notes.

Why we use data

• To schedule, confirm, reschedule, and manage study appointments.
• To communicate practical study information, including session details and location where relevant.
• To operate, secure, troubleshoot, and improve the booking and participant tools.
• To verify eligibility, prevent duplicate or fraudulent bookings and referrals, administer participant compensation and referral rewards, and keep payment records.
• To run, validate, de-identify, anonymize, quality-check, and deliver project datasets under contract.
• To maintain business, tax, accounting, security, audit, and contractual records.

Legal basis and consent

For European participants, the legal basis depends on the project. It may include consent, performance of a participant agreement, legitimate interests, legal obligations, or processing carried out under a client controller's instructions. Where consent is used, it must be freely given, specific, informed, unambiguous, and recorded through an affirmative act such as a signature. Booking a slot is not study consent.

Before collection starts, the project-specific notice and consent form must identify the responsible controller and operator; explain the exact purpose, data categories, recipients, international transfers, retention, rights, withdrawal process, and compensation terms; and be provided in language the participant understands. Every person in a recorded conversation must consent before recording.

Client-controlled data

Bracket Bridge works on a contract basis. Client project data remains client-controlled unless the applicable written agreement says otherwise. Bracket Bridge does not claim ownership of client project data and processes it only within the agreed project scope.

Sharing and processors

Data may be shared with the relevant client, approved operators or subcontractors, hosting and infrastructure providers, storage and security vendors, scheduling or communication tools, payment, accounting, tax, or recruitment providers, quality-control reviewers, professional advisers, or authorities where required by law. Bracket Bridge does not sell booking inquiry data.

Retention

Booking records are kept only as long as needed for scheduling, coordination, study administration, security, dispute handling, accounting, and legal records. Payment, referral, eligibility, and fraud-prevention records may be kept as needed for payout administration, accounting, tax, audit, disputes, and legal obligations. Project data is retained according to the applicable statement of work, participant notice, deletion schedule, or data processing agreement. Direct identifiers should be minimized, separated, de-identified, anonymized, or deleted when no longer needed.

International transfers

Bracket Bridge is operated from the United States and may work with participants, clients, and service providers in Europe, Switzerland, the United Kingdom, Hong Kong, and other regions. Where required, cross-border transfers should be handled through project contracts, data processing terms, Standard Contractual Clauses, the EU-U.S. Data Privacy Framework for participating organizations, or another appropriate transfer mechanism.

Your rights

Depending on your location and project context, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal, and data that has been irreversibly anonymized may no longer be linkable or retrievable. You may also have the right to complain to a data protection authority. To make a request, email support@bracketbridge.com and include the project name, booking code, and the phone or email used for the booking.

EU representative and DPO

Bracket Bridge has not named a public Data Protection Officer or EU representative on this general site notice. If a specific project requires an EU representative, DPO contact, or local representative under applicable law, that information should appear in the project-specific notice or client agreement.