Privacy Policy & Data Safety

The Data Controller responsible for the operation of this platform and its associated services is Bridgiva LLC, led by Chief Executive Officer (CEO) Mihajlo Jezdić.

This policy applies globally to web platforms (https://bridgiva.com and https://napravi.site), associated APIs, and native mobile applications published under Bridgiva LLC or generated via our store-to-app bridge, including:

• Application Name: Bridgiva Demo
• Package Identifier (Package Name): com.napravi.site.demo
• Developer Entity: Bridgiva LLC (Delaware, USA / global operations)
• Store Submissions & Policy Compliance: [email protected]
• Data Protection Inquiries: [email protected]

The Android application Bridgiva Demo (com.napravi.site.demo) operates as an interactive showcase and live companion for e-commerce stores. In full alignment with Google Play User Data Policy requirements, we provide complete transparency regarding mobile data handling:

• Personal User Information: Name, email address, and optional phone number entered by the user during account registration or guest checkout simulation.
• Device Identifiers & Telemetry: Device hardware model, operating system version (Android/iOS), screen dimensions, and diagnostic crash data used strictly to optimize performance (ensuring smooth 60 FPS animations) and troubleshoot technical bugs.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) registration tokens issued by Google LLC, used strictly to deliver transactional updates (order status, companion preview pairing) and opted-in alerts requested by the user.

To ensure total compliance with the Google Play User Data Policy and international data security standards, Bridgiva LLC enforces strict technical, cryptographic, and operational safeguards for personal and sensitive user data:

• Encryption in Transit (Data Transmission Security): All network communications between the mobile application (com.napravi.site.demo), mobile client devices, and Bridgiva cloud infrastructure are strictly secured using Transport Layer Security (TLS 1.3 / HTTPS) with modern, verified cipher suites. Unencrypted plaintext HTTP communication is strictly blocked at the Android operating system level via Network Security Configuration (cleartextTrafficPermitted="false").
• Encryption at Rest (Storage Security): On mobile devices, sensitive authentication tokens and session identifiers are stored using the Android Keystore system and encrypted local storage (EncryptedSharedPreferences / SecureStore). On the backend, all database records in PostgreSQL are protected with disk-level AES-256 encryption hosted in secure, Tier-IV ISO 27001 certified data centers with automated encrypted daily backups.
• Architectural Isolation (Multi-Tenancy): Every business client's database partition and user data are isolated via row-level security and schema boundaries, preventing any possibility of unauthorized cross-tenant data exposure.
• Access Control & Least Privilege: Production systems and database clusters are restricted to authorized engineering personnel via hardware-backed Multi-Factor Authentication (MFA), with all administrative actions immutably recorded in audit logs.

The Bridgiva Demo mobile application uses a strictly minimal set of device permissions and local storage:

• Camera & Photo Library: Accessed solely upon explicit, voluntary user initiation—for instance, when scanning a QR code to immediately launch a live store demo on the physical device, or when selecting an image to upload a user avatar or product asset. The application never captures audio, accesses background video, or inspects files without active user interaction.
• Local Cache Storage (AsyncStorage / SecureStore): Used to cache UI layouts (Server-Driven UI) to optimize rendering speed at 60 FPS and persist user login sessions until manual sign-out.

In full adherence to Google Play Account Deletion requirements and GDPR Right to Erasure, Bridgiva provides a transparent, easy-to-use method for any user to permanently delete their account and all associated personal data:

We do not sell, rent, trade, or monetize personal or sensitive user data to data brokers, ad networks, or unauthorized third parties for monetary or other consideration.

All data collected is used solely to provide and improve the mobile application experience and core platform services.

The Bridgiva platform and Bridgiva Demo application are intended for commercial enterprises and general audiences aged 16 and older (or 13+ under US COPPA guidelines). We do not knowingly collect or solicit personal information from children.

Depending on your jurisdiction, you possess specific legal rights regarding your personal information:

• European Union (GDPR): Right to access, rectify, erase ("right to be forgotten"), restrict processing, object to processing, and request data portability in structured JSON format.
• California Residents (CCPA/CPRA): Right to know, right to delete, right to opt-out of sales (which we do not perform), and right to non-discrimination.

To exercise any of these statutory rights, please contact our Data Protection Office at [email protected].

This policy was last updated on October 14, 2026 in compliance with the Google Play User Data Policy. Any material modifications will be announced on this page with an updated revision date.