Privacy Policy

Effective date: July 29, 2026  |  ITEDA Solutions ("bridGe", "we")

This policy explains what information bridGe collects, how we use it, and the choices you have. bridGe is a Google Forms add-on that collects M-Pesa payments from form respondents.

Information we collect

• Form owners: your Google account email, the M-Pesa number and payment destination (Paybill, Till, or bank account) you configure, and your form/sheet identifiers.
• Respondents: the M-Pesa phone number entered on the form, the payment amount, the transaction status and M-Pesa receipt number, and the form responses needed to compute the amount. Where the form collects an email address, we also process it to send payment receipts and payment-failure notices.
• Technical: logs required to operate and secure the service (with phone numbers redacted where feasible).

How we use Google user data

bridGe accesses your Google Forms and the linked Google Sheet only to add the payment section, read the fields needed to compute the amount, and write the payment status back to your responses sheet. To calculate and process each payment, the phone number and computed amount are sent to bridGe's own backend server (hosted on Google Cloud), which is what communicates with Safaricom to initiate the M-Pesa request — form and sheet content is never sent anywhere else. bridGe's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it.

How we use your information

• To initiate M-Pesa payments and record their outcome.
• To update your responses sheet with payment status.
• To provide support, prevent abuse, and meet legal obligations.

Emails we send

If the form collects a respondent's email address, bridGe uses it to send a receipt when a payment succeeds, and a notice with a retry link when a payment fails. For form owners on our Direct settlement tier, bridGe periodically emails an invoice (with a link to pay bridGe's service fee) to the Google account email you registered the form with. All of these are transactional messages tied to a specific payment or invoice, not marketing. We do not send marketing email, and we do not share respondent or owner email addresses with anyone else.

Third parties

We share the minimum data necessary with Safaricom (M-Pesa) to process payments, and we operate on Google Cloud. We do not sell your data.

Data retention & security

We retain payment records for as long as needed to operate the service and meet legal/accounting obligations, then delete or anonymize them. Data is stored on Google Cloud with access controls; secrets are held in a managed secret store.

Your choices

Form owners can disconnect bridGe from a form at any time and can request deletion of their stored configuration by contacting us.

Contact

Questions or requests: itedasolutions@gmail.com.

Changes

We may update this policy; material changes will be reflected here with a new effective date.