Policies
Privacy Policy
We collect as little as we can, we don't sell it, and we don't track you around the web.
Effective 22 October 2026
Who is responsible
Rainbow Bridge Technology LLC, which trades as Iris Bridge, at 8 The Green, Suite A, Dover, Delaware 19901, USA. Contact: [email protected].
What we collect
- What you send us: your name, email and the content of any message you write to us.
- Your account: the email you sign in with. We also keep a record that you signed in.
- Purchases: what you bought, when you bought it, and the amount. Stripe processes card details. We only see the card brand and the last four digits.
- Technical data: our hosting provider keeps short-lived logs, such as IP address, browser and pages requested, to keep the services secure and working.
Why we use it
We use it to give you what you asked for or paid for, to sign you in, to send receipts and the messages a service needs, to prevent fraud, and to meet legal and tax duties. We don't sell your data and we don't use it for advertising.
Who helps us
We share data only with the providers that run parts of the services for us, and only as much as each one needs:
- Stripe: payments.
- Cloudflare: hosting, security and email routing.
- Supabase: accounts and app data.
- Resend: sending email, such as sign-in codes and receipts.
We also share data when the law requires it.
Cookies
We only use cookies that keep you signed in. We don't use advertising or third-party tracking cookies.
How long we keep it
We keep account data while your account is open. We keep purchase records for as long as tax law requires, usually seven years. Messages are kept for as long as they are useful for helping you. Hosting logs are deleted automatically after a short time.
Your choices
You can ask us to show you, correct, export or delete your data, or to stop using it. Write to [email protected] and we reply within 30 days. We may need to keep some records the law requires, such as invoices. Depending on where you live, you may also be able to complain to your local data protection authority.
Where it is stored
We're a US company, and our providers may store data in the United States or other countries. When data leaves your country, we rely on our providers' standard safeguards.
Security
We protect your data with encryption in transit, limited access and providers with strong security records. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects you, we'll tell you as the law requires.
Children
The services are not meant for children under 13, and we don't knowingly collect their data. If you think we have some, tell us and we will delete it.
Changes
If we change this policy, we update the date at the top. If the change is significant and you have an account, we tell you by email first.