Bryd Privacy Policy
Last updated: 2 June 2026
1. Introduction
1. Introduction
This Privacy Policy explains how Bryd Technologies and its group of companies (“Bryd”, “we”, “us” or “our”) collect, use, disclose and otherwise process personal data.
It applies to:
- visitors to our website at bryd.io and our other public-facing properties (the “Website”);
- prospective and current customers and their personnel engaging with us in relation to our business operations as well as products and services;
- recipients of our marketing communications;
- attendees of our events, webinars and meetings;
- vendors, suppliers, professional advisors and partners; and
- authorised users of Bryd’s software products (“Software”), including Broadcast Bot.
It does not apply to:
- personal data that Bryd processes on behalf of a customer (where the customer is the controller and Bryd is the processor);
- Bryd personnel and job applicants, who have submitted their personal data to us; or
- third-party websites or services linked from the Website, which have their own privacy policies.
Please keep us informed if your personal data changes during your relationship with us so that the information we hold remains accurate and up to date.
2. About Bryd
We help organisations implement, migrate, configure and operate platform and AI native solutions, and provide software products that operate alongside those platforms, including Bryd built tools like Broadcast Bot, a targeted messaging tool for Slack.
When we mention “Bryd”, “we”, “us” or “our” in this Privacy Policy, we are referring to the Bryd entity responsible for the relevant processing of your personal data. Where you contract with Bryd, the contracting entity is identified in the applicable agreements and other documentation. Where you visit the Website, Bryd Technologies Pte. Ltd. is the controller responsible for personal data collected through the Website.
3. When We Are a Controller and When We Are a Processor
Depending on the context, Bryd processes personal data in two different roles.
Controller. We act as a data controller (determining how and why personal data is processed) in respect of certain situations, such as: personal data collected through the Website; business contact data of prospective and current customers, vendors, professional advisors and partners; marketing recipients; event and webinar attendees; and authorised users of our Software in respect of account administration and security.
Processor. We also act as a data processor (processing personal data on a customer’s documented instructions) in respect of personal data that we access or process during the delivery of professional services — for example, when migrating, configuring or managing a customer’s Slack or Salesforce environment — and Customer Data submitted to or processed by our Software in the course of a customer’s subscription, including content sent through Broadcast Bot.
This Privacy Policy describes our practices when we act as a controller.
4. Information We Process
Personal data means any information relating to an identified or identifiable individual. We may collect, use, store and transfer the following categories of personal data about you:
Identity Data — first name, last name, username or similar identifier, and professional title.
Contact Data — email address, postal address, telephone numbers and, where relevant, billing or delivery addresses.
Account Data — credentials, security settings and user-management information for authorised users of our Software.
Financial and Transaction Data — billing details, payment-card or bank-account information processed by our payment processors, invoices, purchase history and credit-related information.
Technical Data — internet protocol (IP) address, login data, browser type and version, time-zone setting and approximate location, browser plug-in types and versions, operating system, platform and device identifiers.
Usage Data — information about how you interact with and use the Website, our Software, our products and our services.
Profile Data — preferences, interests, feedback, survey responses and any content you choose to provide.
Marketing and Communications Data — your preferences in receiving marketing from us and from third parties, your communication preferences, and the content and metadata of communications you exchange with us.
Engagement Data — information you provide during a sales, scoping, support or services interaction, including in calls, meetings, demos, workshops and shared collaboration tools (for example, Slack channels we use to deliver projects).
We also use aggregated data such as statistical or demographic data. Aggregated data is not personal data because it does not directly or indirectly identify you.
We do not knowingly collect special category personal data, sensitive personal information or government-issued identifiers through the Website or our marketing activities. If you provide such information voluntarily (for example, in correspondence with us), we will process it only to the extent necessary to respond and will delete it where no longer required.
Please do not supply any other person’s personal data to us unless we ask you to do so.
5. How We Collect Your Information
We collect personal data in the following ways:
Directly from you. When you fill in a form on the Website, request information, sign up for a webinar, sign a contract, contact us by email or phone, or otherwise interact with us.
Through your use of our Website and Software. We collect Technical Data and Usage Data automatically using cookies, server logs and similar technologies. See Section 8 (Cookies).
From your organisation. Where we engage with an organisation, we receive business contact details and role information for individuals at that organisation.
From third parties and public sources. Including analytics providers (such as Google); business networks (such as LinkedIn); event hosts and co-marketing partners; payment service providers; sanctions, credit and due-diligence screening providers; and publicly available registries (such as the Accounting and Corporate Regulatory Authority of Singapore, Companies House and equivalent registries elsewhere).
From co-sell and channel partners. We work with platform vendors (notably Salesforce, including Slack) to co-sell into shared accounts. Where we engage with a customer alongside such a partner, we may receive your contact and engagement information from that partner.
6. How We Use Your Personal Data and Legal Bases
We use your personal data only where we have a lawful basis to do so, such as:
- to perform the contract we are about to enter into or have entered into with you.
- where it is necessary to comply with a legal obligation.
- for our legitimate interests, such as to enable us to run our business, improve our products and services, prevent fraud, and provide you the best customer experience possible.
- when you have given us your consent.
The following table sets out the principal purposes for which we use your personal data, the categories involved, and our specific lawful bases.
1. Introduction
This Privacy Policy explains how Bryd Technologies and its group of companies (“Bryd”, “we”, “us” or “our”) collect, use, disclose and otherwise process personal data.
It applies to:
- visitors to our website at bryd.io and our other public-facing properties (the “Website”);
- prospective and current customers and their personnel engaging with us in relation to our business operations as well as products and services;
- recipients of our marketing communications;
- attendees of our events, webinars and meetings;
- vendors, suppliers, professional advisors and partners; and
- authorised users of Bryd’s software products (“Software”), including Broadcast Bot.
It does not apply to:
- personal data that Bryd processes on behalf of a customer (where the customer is the controller and Bryd is the processor);
- Bryd personnel and job applicants, who have submitted their personal data to us; or
- third-party websites or services linked from the Website, which have their own privacy policies.
Please keep us informed if your personal data changes during your relationship with us so that the information we hold remains accurate and up to date.
2. About Bryd
We help organisations implement, migrate, configure and operate platform and AI native solutions, and provide software products that operate alongside those platforms, including Bryd built tools like Broadcast Bot, a targeted messaging tool for Slack.
When we mention “Bryd”, “we”, “us” or “our” in this Privacy Policy, we are referring to the Bryd entity responsible for the relevant processing of your personal data. Where you contract with Bryd, the contracting entity is identified in the applicable agreements and other documentation. Where you visit the Website, Bryd Technologies Pte. Ltd. is the controller responsible for personal data collected through the Website.
3. When We Are a Controller and When We Are a Processor
Depending on the context, Bryd processes personal data in two different roles.
Controller. We act as a data controller (determining how and why personal data is processed) in respect of certain situations, such as: personal data collected through the Website; business contact data of prospective and current customers, vendors, professional advisors and partners; marketing recipients; event and webinar attendees; and authorised users of our Software in respect of account administration and security.
Processor. We also act as a data processor (processing personal data on a customer’s documented instructions) in respect of personal data that we access or process during the delivery of professional services — for example, when migrating, configuring or managing a customer’s Slack or Salesforce environment — and Customer Data submitted to or processed by our Software in the course of a customer’s subscription, including content sent through Broadcast Bot.
This Privacy Policy describes our practices when we act as a controller.
4. Information We Process
Personal data means any information relating to an identified or identifiable individual. We may collect, use, store and transfer the following categories of personal data about you:
Identity Data — first name, last name, username or similar identifier, and professional title.
Contact Data — email address, postal address, telephone numbers and, where relevant, billing or delivery addresses.
Account Data — credentials, security settings and user-management information for authorised users of our Software.
Financial and Transaction Data — billing details, payment-card or bank-account information processed by our payment processors, invoices, purchase history and credit-related information.
Technical Data — internet protocol (IP) address, login data, browser type and version, time-zone setting and approximate location, browser plug-in types and versions, operating system, platform and device identifiers.
Usage Data — information about how you interact with and use the Website, our Software, our products and our services.
Profile Data — preferences, interests, feedback, survey responses and any content you choose to provide.
Marketing and Communications Data — your preferences in receiving marketing from us and from third parties, your communication preferences, and the content and metadata of communications you exchange with us.
Engagement Data — information you provide during a sales, scoping, support or services interaction, including in calls, meetings, demos, workshops and shared collaboration tools (for example, Slack channels we use to deliver projects).
We also use aggregated data such as statistical or demographic data. Aggregated data is not personal data because it does not directly or indirectly identify you.
We do not knowingly collect special category personal data, sensitive personal information or government-issued identifiers through the Website or our marketing activities. If you provide such information voluntarily (for example, in correspondence with us), we will process it only to the extent necessary to respond and will delete it where no longer required.
Please do not supply any other person’s personal data to us unless we ask you to do so.
5. How We Collect Your Information
We collect personal data in the following ways:
Directly from you. When you fill in a form on the Website, request information, sign up for a webinar, sign a contract, contact us by email or phone, or otherwise interact with us.
Through your use of our Website and Software. We collect Technical Data and Usage Data automatically using cookies, server logs and similar technologies. See Section 8 (Cookies).
From your organisation. Where we engage with an organisation, we receive business contact details and role information for individuals at that organisation.
From third parties and public sources. Including analytics providers (such as Google); business networks (such as LinkedIn); event hosts and co-marketing partners; payment service providers; sanctions, credit and due-diligence screening providers; and publicly available registries (such as the Accounting and Corporate Regulatory Authority of Singapore, Companies House and equivalent registries elsewhere).
From co-sell and channel partners. We work with platform vendors (notably Salesforce, including Slack) to co-sell into shared accounts. Where we engage with a customer alongside such a partner, we may receive your contact and engagement information from that partner.
6. How We Use Your Personal Data and Legal Bases
We use your personal data only where we have a lawful basis to do so, such as:
- to perform the contract we are about to enter into or have entered into with you.
- where it is necessary to comply with a legal obligation.
- for our legitimate interests, such as to enable us to run our business, improve our products and services, prevent fraud, and provide you the best customer experience possible.
- when you have given us your consent.
The following table sets out the principal purposes for which we use your personal data, the categories involved, and our specific lawful bases.
Purpose
Categories Used
Lawful Basis
Where we rely on legitimate interests, we have considered and balanced any potential impact on you and your rights and have concluded that our interests are not overridden by your interests, rights or freedoms.
Where we rely on consent, you may withdraw that consent at any time by contacting us. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdraw, and we may continue to process your personal data on another lawful basis where applicable.
7. Cookies and Similar Technologies
Cookies are small files placed on your device that allow us to recognise you and remember information about your visit. We and our service providers use cookies, server logs, pixels and similar technologies on the Website.
We use these technologies to:
- operate and authenticate the Website (strictly necessary);
- remember your preferences and settings;
- protect the Website and our Software against fraud and security threats; and
- analyse use and performance of the Website, including through Google Analytics.
You can change your cookie preferences at any time through your browser settings; if you do so, parts of the Website may not work as intended.
We do not currently use cookies for behavioural or cross-context advertising. We respect Global Privacy Control (GPC) signals where required by applicable law.
8. Artificial Intelligence and Automated Processing
Some features of our Website, Software and services use artificial-intelligence or machine-learning models, including third-party models provided by Anthropic, OpenAI, Google and Salesforce Einstein. Where AI is involved:
- We do not use personal data submitted to our Software (including Customer Data, as defined in the applicable customer agreement) to train our or any third-party general-purpose AI models, except with the customer’s prior written consent.
- We may use aggregated, anonymised and de-identified usage information to improve our products and services.
- AI-generated output is probabilistic. We do not make decisions that produce legal or similarly significant effects on you solely by automated means without human involvement.
- Where the underlying AI providers offer such commitments, we have contractual arrangements in place prohibiting them from using inputs and outputs submitted via our Software to train their models.
9. Service Providers
We engage carefully selected third parties to help us deliver our Website, Software and services. The categories of recipient we use include:
Category
Examples
Airwallex
Slack
Google Workspace
Notion
Atlassian
Mailchimp
Webinar and event platforms
OpenAI
Agentforce
Slack
Fireflies
Single sign-on and identity providers
Accountants and auditors
Insurers
Bankers
10. How We Share Your Personal Data
We share your personal data with:
- other entities within the Bryd group, where necessary for the purposes set out in this Privacy Policy;
- service providers, sub-processors, suppliers, subcontractors and agents engaged to perform functions on our behalf (see Section 9);
- co-sell and channel partners (notably Salesforce, including Slack), where we engage with a shared customer or prospect together with that partner;
- our professional advisors, including lawyers, accountants, auditors, bankers and insurers;
- regulatory authorities, law-enforcement agencies and courts, where required by law or where reasonably necessary to protect our rights or the rights of others;
- an acquirer, successor or assignee in connection with a merger, acquisition, financing, restructuring, asset sale or other corporate transaction (or the negotiation of any of the foregoing), where the recipient is bound by appropriate confidentiality obligations; and
- any other recipient with your consent or at your direction.
We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. We do not allow our service providers to use your personal data for their own purposes and only permit them to process it for specified purposes and in accordance with our instructions.
We do not sell your personal data for money. Where any sharing of personal data (for example, with co-sell partners or analytics providers) might constitute a “sale” or “sharing” under certain US state privacy laws, we honour applicable opt-out rights as described in Section 15.
11. International Transfers
Bryd is a multi-jurisdictional group. Personal data we collect may be transferred to, stored or processed in countries other than the country in which it was collected, including Singapore, the United States, Ireland and the Philippines, and in any other country in which our service providers operate.
When we transfer personal data across borders, we do so in accordance with applicable transfer rules. In particular:
- Transfers from your home country to a country without an adequacy decision, or which have laws that do not provide the same level of data protection as the law of your home country, are protected by standard contractual clauses (SCCs) approved for use in your home country or equivalent mechanisms. Where appropriate, we also implement supplementary technical, contractual and organisational measures.
12. How We Protect Your Personal Data
Bryd maintains a recognised information-security program designed to protect personal data against unauthorised or unlawful access, use, disclosure, alteration or destruction. Our measures include:
- encryption of personal data in transit (TLS 1.2 or higher) and at rest;
- role-based access controls, the principle of least privilege, and multi-factor authentication for access to systems handling personal data;
- secure software-development and code-review practices;
- regular vulnerability scanning, security patching, anti-malware controls and security-awareness training for personnel;
- logging and monitoring of access to systems holding personal data;
- contractual obligations on our sub-processors and service providers to maintain comparable safeguards; and
- an incident-response process for identifying, containing, investigating and notifying personal-data breaches.
Despite our efforts, no method of transmission over the internet or method of electronic storage is completely secure. We will notify you and any applicable regulatory authority of a notifiable breach of personal data in the manner and within the timeframes required by applicable law.
13. How Long We Retain Your Personal Data
We retain your personal data only for as long as is reasonably necessary for the purposes for which we collected it, including to satisfy any legal, regulatory, tax, accounting, reporting or contractual requirements and to establish, exercise or defend legal claims. In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
14. Your Rights
Depending on the data protection and privacy laws that apply to you, you may have some or all of the following rights in respect of your personal data that we collect, use or otherwise process:
Right
Description
This enables you to receive a copy of the personal data we hold about you (provided that this does not affect the rights and freedoms of others), and to check that we are lawfully processing it. The first copy is provided free of charge, but additional copies may be subject to a reasonable fee.
To exercise any of these rights, please contact us using the details in Section 19. We may need to verify your identity before responding, and we may decline a request where an exception applies (for example, where the request is manifestly unfounded or excessive, or where doing so would adversely affect the rights and freedoms of others). We will respond to verifiable rights requests within the timeframes required by applicable law.
If you are dissatisfied with our response, you may appeal our decision by emailing privacy@bryd.io with the subject line “Rights Request Appeal”. We will respond to your appeal within the timeframe required by applicable law.
15. USA-Specific Information
Where you are a resident of a state with a comprehensive consumer privacy law, many of the rights in respect of your personal data are stated in Section 14.
In addition, Bryd does not sell personal information for monetary consideration. We may share personal information with analytics or co-sell partners in ways that could constitute “sharing” or “targeted advertising” under certain state laws; where you are entitled to opt out, you may do so by contacting privacy@bryd.io or by enabling the Global Privacy Control signal in a supported browser, which we honour where required by law. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit such use under California law.
California residents have additional disclosures under the CCPA/CPRA, including the right of non-discrimination for exercising their rights. We do not knowingly collect or process personal information of consumers under 16 for sale or sharing.
16. Children’s Privacy
Bryd’s Website, products and services are not directed to children. We do not knowingly collect personal data from children, and we do not knowingly use or disclose the personal information of consumers under 16 in ways that would require parental consent or opt-in under applicable law. If you believe that we may have collected personal data from a child, please contact us at privacy@bryd.io and we will take appropriate steps to delete the information.
17. Third-Party Links and Services
The Website may include links to, or be accessed via, third-party websites, plug-ins, applications and platforms (including Slack, Salesforce, Notion, LinkedIn, and event and webinar providers). Clicking those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control those third parties and are not responsible for their privacy practices. When you leave the Website, we encourage you to read the privacy policy of every site you visit.
18. Changes to this Privacy Policy
We keep this Privacy Policy under regular review and may update it from time to time. The “Last updated” date at the top of this page reflects the date of the most recent changes. Where changes are material, we will take reasonable steps to bring them to your attention, for example by a notice on the Website or by email to subscribed users. Your continued use of the Website or our products or services after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by law. Historical versions of this Privacy Policy are available on request.
19. How to Contact Us
If you have any questions, concerns or complaints about this Privacy Policy or our handling of your personal data, or if you wish to exercise any of your rights, please contact our Data Protection Officer:
- Data Protection Officer: Laurence Fitch
- Email: privacy@bryd.io
- Post: Data Protection Officer, Bryd Technologies Pte. Ltd., 5 Temasek Boulevard, #17 Suntec Tower Five, Singapore 038985
If you are not satisfied with our response, you may have the right to lodge a complaint with the data-protection authority in your jurisdiction (see Section 14).
We would, however, appreciate the opportunity to address your concerns first — please contact us before escalating.
