Privacy Policy

BridgeUp Tech Private Limited (“BridgeUp”, “we”, “us”, or “our”), a company incorporated under the laws of India with its registered office in Mumbai, Maharashtra, operates the website at https://www.bridgeup.com (the “Website”). This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, and protect the personal data of visitors to the Website (“you” or “your”).

This Privacy Policy applies only to personal data collected through the Website. It does not apply to Safe Passage or Fiscus, BridgeUp’s products, which are made available to banks, NBFCs, and other institutional clients under separate written agreements that govern the processing of any data in connection with those products.

This Privacy Policy is to be read together with BridgeUp’s Terms of Use accessible at https://www.bridgeup.com/terms. By accessing or using the Website, you agree to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

Information We Collect

1.Information you provide. When you contact us through the Website, including through the contact form, you may provide us your name, work email address, company name, and message, and optionally your phone number. You provide this information voluntarily, and submitting it to us is your consent to its use as described in this Privacy Policy.

2.Information collected automatically. When you visit the Website, certain information is collected automatically through analytics tools, including your device and browser type, approximate location, and the pages you visit. This is described further under “Cookies and Analytics” below.

Cookies and Analytics

3.We use Google Analytics, a service provided by Google, to understand how visitors use the Website and to improve it. Google Analytics uses cookies to collect device and browser information, approximate location, and information about the pages you visit. We use this information in aggregated form, and it does not identify you personally.

4.You can control or disable cookies through your browser settings, and Google separately offers a browser add-on to opt out of Google Analytics. Disabling cookies may affect certain aspects of your experience on the Website, though the Website will otherwise remain accessible.

How We Use Your Information

5.We use the information described above only for the following purposes:

(a)to respond to your enquiry and for any related follow-up correspondence;

(b)to understand how visitors use the Website and to maintain and improve it; and

(c)to comply with applicable law, and to establish, exercise, or defend legal claims.

6.We do not use your information for any purpose unrelated to the above without seeking your separate consent.

Disclosure of Your Information

7.We use a limited number of service providers to operate the Website: Postmark, which delivers contact form submissions to our inbox, and Google, which provides website analytics. These service providers process your information on our behalf and only for the purposes described in this Privacy Policy.

8.We may also disclose your information:

(a)where required by applicable law, regulation, court order, or a request from a law enforcement or government authority;

(b)where necessary to establish, exercise, or defend a legal claim, or to investigate suspected fraud, security, or technical issues; or

(c)in connection with a merger, acquisition, financing, or sale of all or substantially all of BridgeUp’s assets, subject to the acquiring entity agreeing to honour the commitments made in this Privacy Policy.

9.We do not sell your personal data. We do not disclose your personal data to any third party for that third party’s own independent marketing purposes.

Where Your Information Is Stored

10.BridgeUp is based in Mumbai, India, and our service providers may process your information on servers located outside India, including in the United States. Where this occurs, we require our service providers to protect your information to standards no less protective than those set out in this Privacy Policy. We do not transfer personal data to any country or territory restricted by notification of the Central Government of India under the Digital Personal Data Protection Act, 2023.

Data Retention

11.We retain contact form submissions and related correspondence for up to 24 (twenty-four) months following our last exchange with you, after which we delete them, unless a longer retention period is required to comply with applicable law or to establish, exercise, or defend a legal claim.

Security

12.We employ reasonable technical and organisational security practices and procedures appropriate to a website of this nature to protect your information against unauthorised access, disclosure, alteration, or loss.

Your Rights

13.Under the Digital Personal Data Protection Act, 2023, you have the right to:

(a)obtain a summary of the personal data we hold about you and the processing activities we carry out in relation to it;

(b)request correction or erasure of your personal data;

(c)withdraw your consent to our processing of your personal data at any time, with the withdrawal being as easy to exercise as the grant of consent, and without affecting the lawfulness of processing carried out before such withdrawal;

(d)nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, in accordance with the Act; and

(e)file a complaint with the Data Protection Board of India if you believe your rights under the Act have not been respected.

14.To exercise any of these rights, please write to us using the contact details in the “Grievances” section below. We will acknowledge and act on your request within a reasonable time and, in any event, in accordance with the timelines prescribed under applicable law.

Children

15.The Website is directed at institutions and business visitors and is not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children, and if we become aware that we have inadvertently done so, we will take reasonable steps to delete it.

Grievances

16.If you have any questions, concerns, or grievances regarding this Privacy Policy or the processing of your personal data, please contact our Grievance Officer:

We will acknowledge and address your grievance within 30 (thirty) days of receipt.

Changes to this Privacy Policy

17.We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will publish the updated Privacy Policy on the Website together with the date of the last update. Your continued access to or use of the Website after such changes are published constitutes your acceptance of the updated Privacy Policy.

This Privacy Policy was last updated on 23rd July, 2026.