Privacy Policy

1. Introduction

DDSBridge (“we,” “us,” or “our”) operates the DDSBridge remote desktop platform and the ddsbridge.com website. This Privacy Policy describes how we collect, use, and share information when you use our services.

2. Information We Collect

We collect information in the following categories:

• Account Information: Name, email address, organization name, and billing information when you subscribe to DDSBridge.
• Usage Data: Connection logs, session metadata (timestamps, duration, device IDs), and service performance metrics. We do NOT log session content.
• Device Information: Operating system, DDSBridge client version, and device identifiers necessary for remote connections.
• Website Analytics: Standard web analytics (page views, referral sources) collected via privacy-respecting analytics tools.

3. How We Use Your Information

• To provide, maintain, and improve the DDSBridge service
• To process subscriptions and billing
• To provide technical support
• To generate audit logs for compliance purposes
• To detect and prevent security threats
• To communicate service updates and announcements

4. End-to-End Encryption

DDSBridge uses NaCl-based end-to-end encryption for all remote desktop sessions. This means that session content (screen data, keyboard input, file transfers) is encrypted between the two endpoints and cannot be accessed by DDSBridge, our infrastructure providers, or any third party.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share limited data with:

• Infrastructure providers: Our servers run on dedicated infrastructure in US-based data centers. They process network traffic but cannot access encrypted session content.
• Payment processors: Billing is handled by secure, PCI-compliant payment processors.
• Legal requirements: We may disclose information when required by law or to protect our legal rights.

6. HIPAA Compliance

For healthcare entities subject to HIPAA, we offer a Business Associate Agreement (BAA). We implement administrative, physical, and technical safeguards to protect Protected Health Information (PHI) in compliance with the HIPAA Security Rule.

7. Data Retention

Account information is retained for the duration of your subscription plus 90 days. Session metadata and audit logs are retained for 12 months to support compliance requirements. You may request deletion of your data at any time by contacting support@ddsbridge.com.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. To exercise these rights, contact us at support@ddsbridge.com.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:

DDSBridge
Email: support@ddsbridge.com