Privacy Policy

Plain-English edition · Last updated July 14, 2026

This policy explains what data Bridge Workshop collects, how we use it, and what we don't do with it. Bridge Workshop is operated by XAVIOR Inc.

Short version: we collect the minimum needed to run a bidding trainer — your Google sign-in identity, your drill activity, and billing status if you subscribe. We never sell your data or use it for advertising.

1. Information We Collect

Account information

Drill activity

Referral data

Automatically collected

2. What We Don't Collect

Signing in with Google only grants Bridge Workshop your basic profile (name, email) — we never request access to your Gmail, Calendar, Drive, or Contacts. There is no chat feature and no conversational data collected. We don't use any health, fitness, or financial integrations.

3. How We Use Your Information

We use your information only to:

We do not use your data for advertising. We do not sell your data.

4. Google User Data

Bridge Workshop uses Google Sign-In only (OAuth 2.0, scopes: openid email profile). We access nothing beyond your name and email address, and never request Gmail, Calendar, Drive, or Contacts permissions.

Bridge Workshop's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Bridge Workshop's access at any time through your Google Account permissions page. Signing out of Bridge Workshop does not delete your account or drill history — contact us to request deletion.

5. Third-Party Services

Anthropic (Claude API)

Bridge Workshop's coaching content (the explanation text for each hand) is generated by Anthropic's Claude API as part of building our curriculum. This happens at content-authoring time, grounded in hand data and double-dummy analysis — your personal data, drill answers, or account information are never sent to Anthropic. Subject to Anthropic's Privacy Policy.

Stripe

Payment processing for Pro subscriptions. We never see or store your full card number. Subject to Stripe's Privacy Policy.

Fly.io

Hosts our application and database. Subject to Fly.io's Privacy Policy.

Cloudflare

Hosts our marketing site and provides CDN/DNS services. Subject to Cloudflare's Privacy Policy.

6. Data Storage and Security

No system is perfectly secure. We take reasonable measures to protect your data but cannot guarantee absolute security.

7. Data Sharing

We do not sell your data. We share data only:

8. Data Retention

9. Your Rights

You have the right to access, export, correct, or delete your data, and to revoke Google's access at any time. To exercise any of these rights, contact privacy@xavior.ai.

10. Cookies

Bridge Workshop uses only essential first-party cookies: a signed session cookie to keep you signed in, and a short-lived cookie during Google sign-in and referral tracking. We use no third-party advertising cookies or trackers.

11. Children's Privacy

Bridge Workshop is not directed at children under 13. We do not knowingly collect personal information from children under 13.

12. California and GDPR Rights

California residents have rights under the CCPA (know, delete, opt out of sale, access, equal service) — we do not sell personal information. Residents of the European Economic Area have rights under the GDPR to access, rectify, erase, restrict, or port their data, and to lodge a complaint with a supervisory authority.

13. International Data Transfers

Your data may be processed in the United States. By using Bridge Workshop, you consent to this transfer.

14. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or through the service.

15. Contact

Privacy matters: privacy@xavior.ai
General support: support@xavior.ai
Website: bridgeworkshop.com