Privacy policy

Effective October 22, 2026 · Last updated October 22, 2026

Bridge Hound logs Outlook email to Salesforce for the companies that use it. It is operated by Quill Hound ("we", "us"). This policy covers bridgehound.com and the Bridge Hound service. We do not sell or share personal information, as "sell" and "share" are defined by the California Consumer Privacy Act and similar laws, we do not use it for advertising, and there are no analytics or advertising trackers.

Who decides what is logged

A company (the "customer") uses Bridge Hound for its own staff and its own Salesforce. For email content and the Salesforce data involved, the customer decides what happens to it and we process it on the customer's behalf. Each person at the customer chooses whether their own email is logged; an admin at the customer can stop it for anyone.

What we collect

• Your Microsoft account details. When you sign in with Microsoft we receive your name, work email address, and your Microsoft account and organisation identifiers. We use them to sign you in and to put you in your company's workspace.
• Microsoft sign-in tokens. Signing in gives Bridge Hound permission to read your mailbox (Microsoft Graph Mail.Read, for you only, never anyone else's mailbox). We store the tokens encrypted so the service can keep logging while you're away. Disconnecting, deleting your account, or removing Bridge Hound from your Microsoft account ends that access.
• Your email, while it is being logged. When logging is on, every couple of minutes we read new messages in your Inbox and Sent Items. For a message with someone outside your company who is in your company's Salesforce, we send the sender, recipients, date, subject, attachment file names and the text of the message to your company's Salesforce as a completed email activity. The message text and attachments are not stored by Bridge Hound; we read them from your mailbox each time they are needed.
• An email log. For each message we looked at after you turned logging on, we keep the subject, the sender, the outside addresses, the date, whether it was logged or skipped and why, and links to the Salesforce records. You see this in the app; your admin sees counts. It is kept while your account exists.
• Your company's Salesforce connection. The org's My Domain, who the integration user is, and (if your company used its own app) an encrypted app key and secret.
• Server logs. Our hosting provider, Cloudflare, records request logs (time, address, status, user agent, IP address and the approximate location derived from it) and error messages. We use them only to keep the service running and to investigate abuse; they are deleted automatically within 7 days.

We use one cookie, a signed sign-in cookie that keeps you signed in for up to 30 days. It is strictly necessary, so there is no cookie banner.

Who else gets the data

• Your company's Salesforce, which receives the logged email activities.
• Microsoft, which provides the sign-in and the mailbox access.
• Cloudflare, which hosts the service and its database (in the United States).

No AI model reads your email, and nothing is used to train one.

Your choices

• Pause or resume logging at any time; email that arrives while paused is never logged.
• Keep a message out by marking it Private or Confidential in Outlook, or by giving it the category "Private" or "Don't log".
• Delete your account in the app: logging stops and we delete your sign-in tokens and email log right away. What was already logged stays in your company's Salesforce, which your company controls.
• For anything else, or to exercise rights you have under the law where you live, email hello@bridgehound.com.

Security

Tokens and secrets are encrypted at rest (AES-256-GCM), every connection uses TLS, and the mailbox permission is read-only. Bridge Hound never sends, changes or deletes email.

Changes

If we change this policy we update the date above, and for a material change we tell signed-in users in the app before it takes effect.