"Withbridge presents high privacy risk through aggressive collection of sensitive financial and identity data, broad third-party sharing with financial partners and advertisers, and indefinite retention policies. Automated decision-making and limited user control over essential data compound exposure."
withbridge Privacy Concerns & Scorecard
Withbridge collects an extensive array of sensitive personal and financial data including government-issued identification documents, bank account statements, cryptocurrency wallet addresses, GPS location tracking, national identification numbers, and fraud history. The policy states data is collected from 'outside records' and 'data providers' without specifying consent mechanisms or user awareness.
Withbridge shares data broadly with Financial Partners (banks, payment processors, crypto exchanges, card networks), Bridge Partners, service providers, and third parties for advertising purposes. The policy states data 'may also be shared with Financial Partners or as required by applicable law' and users can only opt-out of third-party sharing for advertising, not other categories.
Withbridge uses persistent tracking technologies including cookies, web beacons, and customized links to monitor user behavior across sessions. Analytics cookies collect comprehensive browsing data including pages visited, time spent, links clicked, and advertisements viewed. Performance cookies track how marketing campaigns perform.
Withbridge uses automated decision-making for identity verification, sanctions screening, transaction decisioning, and AML monitoring without explicit user consent mentioned in the policy. Users have limited control over essential data collection and retention decisions tied to regulatory obligations.
Data retention periods are vague and potentially indefinite. Policy states retention is determined by 'purpose for which data is used', 'potential or actual legal claims/litigation/regulatory proceedings', and 'legal/regulatory minimum retention periods' with no specific timeframes provided. Legal obligations allow retention even after erasure requests.
The privacy policy uses vague language regarding third-party data enrichment and relies on 'legitimate interests' as a legal basis without clearly explaining how this overrides user privacy expectations. Service provider lists are only available upon request, limiting pre-access transparency.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Identity verification, compliance, sanctions screening, and AML monitoring
Payment processing, fraud detection, financial partner sharing, and transaction decisioning
Fraud prevention, identity verification, and user activity tracking
Session management, fraud detection, analytics, and device identification
Analytics, targeted advertising, performance measurement, and user behavior analysis
Account management, customer support, communications, and service delivery
Fraud prevention, risk assessment, regulatory compliance, and automated decision-making
Cross-Platform Tracking
Withbridge uses cookies, web beacons, and customized tracking links to monitor user behavior across sessions and associate data for targeted communications. Analytics cookies track IP addresses, browser information, pages visited, and links clicked across sessions to profile user behavior and performance.
Tracking Methods:
Cookies (Essential, Functional, Performance, Analytics)
Essential cookies enable basic site functionality; functional cookies preserve user preferences; performance cookies monitor campaign effectiveness; analytics cookies track comprehensive user behavior including pages visited, time spent, links clicked, and advertisements viewed. Users can manage preferences via Cookie Preference link but cannot refuse essential cookies.
Web Beacons and Tracking Pixels
Web beacons and customized links track user behavior and hyperlinks clicked, then associate the information with user identities for focused communications and behavioral analysis.
Device Fingerprinting
Collection of device information, operating system, browser, IP address, and other technical identifiers enables identification and tracking of the same user across sessions and devices without explicit consent mechanisms.
Session Recording
Session recording capability is mentioned in the policy, capturing user interactions, clicks, and form submissions during website visits.
AI & Data Training
withbridge does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed withbridge
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.