Last updated: October 7, 2026<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
Netbridge<\/strong> (“Netbridge”, “we”, “us”) is a digital marketing, web and app development, digital transformation and artificial intelligence agency serving clients in Canada, the United States, Mexico and The Bahamas. This policy explains, in plain language, how we collect, use, disclose, retain, protect and delete your personal information when you visit netbridge.com<\/a>, contact us, do business with us, or authorize our apps to access your Meta (Facebook, Instagram) or Google Ads accounts.<\/p> It applies in particular to Netbridge’s apps that connect to Meta (Facebook, Instagram) and Google Ads.<\/p> In short:<\/strong><\/p> Netbridge is responsible for the personal information it holds. In accordance with Qu\u00e9bec’s Act respecting the protection of personal information in the private sector<\/em> (as amended by Law 25), the following person acts as the person in charge of the protection of personal information (privacy officer):<\/p> The privacy officer approves our personal information governance policies and practices. These cover, among other things, the roles and responsibilities of our staff throughout the information life cycle, retention and destruction, confidentiality incident management and complaint handling.<\/p> Depending on your relationship with us, we may collect the following categories of information:<\/p> We do not seek to collect sensitive personal information (for example health, biometric or detailed financial information). Please do not send it through our forms.<\/p> We use your information only for the following purposes, determined before collection:<\/p> We do not make decisions based exclusively on automated processing of your personal information. If this changes, we will inform you as required by law.<\/p> Where the law requires it, we obtain your clear, free and informed consent for specific purposes. By providing your information through a form, you consent to its use for the purposes stated at the time of collection.<\/p> You may withdraw your consent at any time, subject to legal or contractual restrictions: email contact@netbridge.com<\/a>, reject statistics or marketing cookies with the \u201cCookie Settings<\/a>\u201d link (see section 6<\/a>), remove our apps from your Facebook or Google accounts, or follow the steps on our Data Deletion<\/a> page. Withdrawing consent may prevent us from providing certain services (for example managing your campaigns).<\/p> The site uses cookies and similar technologies. Some are necessary for the site to work and stay secure. Statistics cookies, namely Google Analytics 4 deployed through Google Tag Manager, are turned on only if you accept them: they then collect data about your browsing (pages viewed, time on page, referral source, device, approximate location) and give us statistics about how the site is used. We do not use them for advertising.<\/p> Consent banner:<\/strong> on your first visit, a banner lets you accept<\/strong>, reject<\/strong> or customize<\/strong> cookies by category: necessary (always on), statistics and marketing. By default, everything that is not necessary is turned off<\/strong>: until you accept, no statistics or marketing cookie is stored in your browser. We use Google Consent Mode v2, set to \u201cdenied\u201d by default. In this mode, Google Analytics may receive cookieless signals (for example, that a page was viewed), which cannot be used to recognize you from one visit to the next. Your choice is stored in your browser for 12 months, after which the banner is shown again.<\/p> You can change or withdraw your consent at any time with the \u201cCookie Settings\u201d link at the bottom of every page, or here: Cookie Settings<\/a>. If you withdraw your consent to statistics, Google Analytics cookies are deleted from your browser.<\/p> Other options:<\/strong> you can also block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on<\/a>. You may also withdraw your consent at any time by emailing contact@netbridge.com<\/a>. Blocking necessary cookies may affect how the site works.<\/p> This section describes exactly how our apps process data obtained through the Meta for Developers platform and through Google APIs. It supplements the rest of this policy and prevails over any less protective provision.<\/p> Our apps allow our clients, and the people they authorize, to connect their Meta assets (Facebook Pages, Instagram professional accounts, ad accounts, business portfolios) and Google Ads accounts to Netbridge so that, at their request, we can: display dashboards and performance reports; create, edit, pause or optimize their campaigns, ad sets and ads; and analyze results to make recommendations. We only access the accounts you choose to connect.<\/p> Permissions requested, depending on the authorization you grant: for example OAuth scopes requested, depending on the authorization you grant: for example Platform data is used only<\/strong> to provide and improve the user-facing features you requested: connecting accounts, reports and dashboards, campaign management and optimization, results analysis and technical support. It is also used, when needed, to keep our apps secure (for example to investigate abuse) and to comply with the law. Each client’s data is kept separate from other clients’ data.<\/p> Netbridge’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy<\/a>, including the Limited Use requirements.<\/strong><\/p> We also process data obtained from Meta in accordance with the Meta Platform Terms<\/a> and Meta’s Developer Policies, and Google Ads data in accordance with the Google Ads API Terms and Conditions.<\/p> We only disclose platform data to the client that owns the connected account and the people it authorizes; to our service providers, only as needed to host and operate our apps and under written confidentiality and limited-use obligations; when required by law; or when you expressly ask us to. Campaign changes you ask us to make are, of course, sent to Meta or Google.<\/p> We protect platform data and access tokens with reasonable security measures, including encryption in transit (HTTPS) and access restricted to authorized team members who need it for their work. Tokens are never published or disclosed to unauthorized third parties.<\/p> We keep this data while the connection is active and the mandate is ongoing, then delete it no later than 90 days after the end of the mandate or the revocation of access, unless we are legally required to keep it. Access tokens are deleted as soon as access is revoked. We also delete data when you ask us to, when we stop operating the app, or when Meta or Google requires it. Data that has been irreversibly aggregated or anonymized, and can no longer identify you, may remain in reports delivered to our clients.<\/p> Revoking access prevents any new access. To have data we already received deleted, follow the steps on our Data Deletion<\/a> page.<\/p> We only disclose your personal information with your consent or where the law allows it, including to service providers acting on our behalf under agreements that require them to protect the information and use it only to provide their services. Our main service providers are:<\/p> We may also disclose information to our professional advisers (lawyers, accountants), to authorities when required by law, or to the other party to a business transaction (merger, acquisition, sale of assets), under the conditions set out by law. For data received from Google APIs, such a transfer will only occur with your explicit prior consent.<\/p> The site is hosted by WP Engine and delivered through Cloudflare, whose servers may be located outside Qu\u00e9bec and Canada, including in the United States. Our other providers (Google, Meta, Zoho, Adobe) are also mainly located in the United States. Your information may therefore be disclosed, hosted or processed outside Qu\u00e9bec and Canada, where it may be subject to local laws, including access by authorities. We use well-established providers that make data protection commitments, and we only disclose the information they need.<\/p> We keep your information only as long as needed for the purposes for which it was collected, or longer if required by law:<\/p> At the end of the retention period, information is securely destroyed or anonymized according to generally accepted best practices.<\/p> We apply reasonable security measures appropriate to the sensitivity of the information, including encryption in transit (HTTPS) and access restricted to the people who need it for their work. The site also benefits from our host’s and Cloudflare’s protections against bots and common attacks. No method of transmission or storage is completely secure; if you believe you have found a vulnerability, please email contact@netbridge.com<\/a>.<\/p> Subject to the exceptions provided by law, you have the right:<\/p> Exercising these rights is free of charge. Reasonable fees may however be charged for transcribing, reproducing or sending documents; we would tell you in advance.<\/p> To exercise any of your rights, see our Data Deletion<\/strong><\/a> page or write to our privacy officer at contact@netbridge.com<\/a>. You can also call us at +1 514-214-2689 for assistance. To protect your information, we will verify your identity before acting on your request. We will acknowledge your request as soon as possible and respond in writing no later than 30 days after receiving it. Any refusal will include our reasons and your available remedies.<\/p> We keep a register of confidentiality incidents. If an incident occurs, we promptly take reasonable measures to reduce the risk of harm and prevent similar incidents. If the incident presents a risk of serious injury, we promptly notify Qu\u00e9bec’s Commission d’acc\u00e8s \u00e0 l’information and the individuals concerned. Where federal law applies, we report breaches presenting a real risk of significant harm to the Office of the Privacy Commissioner of Canada and notify the individuals concerned. We also notify Meta or Google when their terms require it.<\/p> For any question or complaint about the protection of your personal information, please first contact our privacy officer (see section 1<\/a>). We acknowledge complaints, review them diligently and respond in writing. If you are not satisfied with our response, you may contact:<\/p> Elsewhere in Canada.<\/strong> We comply with the Personal Information Protection and Electronic Documents Act<\/em> (PIPEDA) and applicable provincial laws. You have, among others, the rights of access and correction, and may file a complaint with the Office of the Privacy Commissioner of Canada.<\/p> United States.<\/strong> To the extent the California Consumer Privacy Act<\/em>, as amended by the California Privacy Rights Act<\/em> (CCPA\/CPRA), or another state privacy law applies, you may ask to know what personal information we collect, use and disclose, and ask us to delete or correct it, without discrimination. Netbridge does not sell your personal information and does not “share” it for cross-context behavioral advertising as those terms are defined in these laws. We do not use sensitive personal information for purposes other than those permitted. To exercise these rights, follow section 13<\/a>; an authorized agent may also submit a request on your behalf.<\/p>Table of contents<\/h2>
1. Person in charge of the protection of personal information<\/h2>
2. Information we collect<\/h2>
3. How we collect your information<\/h2>
4. Why we use your information<\/h2>
5. Consent and withdrawal of consent<\/h2>
6. Cookies and tracking technologies<\/h2>
__cf_bm<\/code>, about 30 minutes) for bot protection; nb_consent<\/code> (browser local storage, 12 months) to remember your cookie choice; Google reCAPTCHA v3 on our forms to prevent spam. reCAPTCHA is subject to Google’s Privacy Policy<\/a> and Terms of Service<\/a>.<\/li>_ga<\/code> cookie and _ga_<\/code> cookie followed by the property ID, lasting up to 2 years), deployed with Google Tag Manager.<\/li>7. Meta and Google apps: platform data<\/h2>
7.1 What our apps do<\/h3>
7.2 Data obtained from Meta (Facebook Login, Graph API, Marketing API)<\/h3>
public_profile<\/code>, email<\/code>, pages_show_list<\/code>, pages_read_engagement<\/code>, ads_read<\/code>, ads_management<\/code> and business_management<\/code>. We only request permissions approved by Meta in App Review and strictly necessary for the features described above. We never ask for your Facebook login credentials.<\/p>7.3 Data obtained from Google (OAuth 2.0 and Google Ads API)<\/h3>
https:\/\/www.googleapis.com\/auth\/adwords<\/code> (Google Ads account management), openid<\/code>, email<\/code> and profile<\/code>. We only request the scopes needed for the features described and never ask for your Google password.<\/p>7.4 How we use this data<\/h3>
7.5 What we never do<\/h3>
7.6 Google Limited Use disclosure<\/h3>
7.7 Sharing platform data<\/h3>
7.8 Storage, protection and retention<\/h3>
7.9 Revoking access<\/h3>
8. Disclosure to third parties and service providers<\/h2>
9. Transfers outside Qu\u00e9bec<\/h2>
10. Retention and destruction<\/h2>
11. Security<\/h2>
12. Your rights<\/h2>
13. Exercising your rights and requesting deletion<\/h2>
14. Confidentiality incidents<\/h2>
15. Complaints<\/h2>
16. Individuals outside Qu\u00e9bec<\/h2>