1. Introduction and Governance
Bridge Labs operates under a multi-jurisdictional compliance framework, including:- GDPR (General Data Protection Regulation) — for individuals in the European Union and EEA
- EU AI Act — governing the use of AI systems in high-risk contexts, including employment screening
- US Federal and State Law — including the Illinois Biometric Information Privacy Act (BIPA), California Consumer Privacy Act (CCPA), and NYC Local Law 144
- African Data Protection Laws — including Nigeria’s NDPR, Kenya’s DPA, South Africa’s POPIA, and other applicable national frameworks
2. Data Collection and Consent
What We Collect
Bridge Labs collects the following categories of personal data through our platform:- Candidate personal information (PII): Name, email address, contact information, and professional background provided directly by the candidate or by the hiring organization
- Video and audio recordings: Responses to interview questions recorded via the Bridge Labs platform
- AI-generated assessments: Scores, evaluations, and feedback generated by our AI models based on candidate responses
- Usage data: Technical information about how users interact with the platform, including device type, browser, and session data
Lawful Basis for Processing
Bridge Labs processes personal data on the following lawful bases:- Consent: Where candidates have explicitly consented to the recording and AI assessment of their interview responses
- Legitimate interest: For platform security, fraud prevention, and improving service quality using anonymized data
- Legal obligation: To comply with applicable employment and data protection laws
- Contractual necessity: To fulfill our obligations to client organizations under signed agreements
Candidate Consent
Before participating in any Bridge Labs interview, candidates are presented with a clear disclosure explaining that their responses will be recorded and assessed using AI. Participation requires explicit consent. Candidates may withdraw consent at any time prior to submission.3. Data Usage, Bias, and Transparency
How We Use Data
Personal data collected through Bridge Labs is used to:- Deliver AI-powered interview assessments and scoring to the hiring organization
- Generate candidate feedback where enabled by the hiring organization
- Improve the accuracy and fairness of our AI models using anonymized, aggregated data
- Meet our legal and contractual obligations
Bias Mitigation
Bridge Labs is committed to fair and non-discriminatory AI. We conduct regular bias audits of our AI models across demographic groups including race, gender, age, and disability status. These audits test for disparate impact in scoring and are made available to enterprise clients upon request. AI scores produced by Bridge Labs are designed to assess job-relevant competencies only. Clients are contractually prohibited from using AI scores as the sole basis for hiring decisions.Explainable AI
Bridge Labs supports transparency in AI decision-making. Where technically feasible, our platform provides explanations for AI-generated scores, including the factors and response characteristics that contributed to a given assessment. Candidates and clients may request additional information about how a specific score was derived.4. Data Security and Storage
Security Measures
Bridge Labs implements industry-standard security measures to protect personal data, including:- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls limiting data access to authorized personnel
- Regular security audits and penetration testing
- Incident response procedures for data breaches
Retention Policy
- Active candidate data: Retained for 12 months from the date of the interview, unless the client organization requests earlier deletion
- Deletion upon deactivation: Following account deactivation, personal data is deleted within 14 days from active systems
- Backup retention: Data may remain in encrypted backup systems for up to 60 days following deletion from active systems, after which it is permanently destroyed
5. Candidate Rights
Candidates whose data is processed through Bridge Labs have the following rights, subject to applicable law: Right to access: Candidates may request a copy of the personal data Bridge Labs holds about them. Right to correction: Candidates may request correction of inaccurate or incomplete personal data. Right to deletion: Candidates may request deletion of their personal data, subject to applicable retention requirements. Right to appeal / redressal: Candidates who believe an AI-generated assessment was unfair or inaccurate may request a human review through the hiring organization. Bridge Labs supports client organizations in establishing redressal mechanisms as required by applicable law, including the EU AI Act. Right to opt out: Candidates may opt out of AI-assisted assessment. In such cases, the hiring organization will be notified and may conduct the assessment through alternative means. How to exercise your rights: Candidates should contact the hiring organization directly, as Bridge Labs acts as a data processor on behalf of the client. Candidates may also contact Bridge Labs at hello@bridgelabs.tech for assistance.6. Contact
For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact: Bridge Labs, Inc. Email: hello@bridgelabs.techLast updated: 2024