MANUFACTURING BRIDGE™
GLOBAL PRIVACY POLICY
Jurisdiction-Specific Privacy Notices Apply Only Where Required
Effective Date: July 24, 2026 | Version 2.5 | Last Updated: July 24, 2026
| IMPORTANT PRIVACY NOTICE This Policy explains personal information processed for the Manufacturing Bridge Website, accounts, structured business profiles, Basic, Gold and Diamond memberships, screening, payments, support, security, and future services. Not currently available — planned for Q4 2026, subject to programme readiness. Before express launch, MB Reviewed is limited to non-binding interest-list and programme-readiness activity; no application, payment, session, Status Decision, badge, or participant source evidence is accepted. If later opened, the programme will use a live-display, zero-retention model. The Platform does not provide internal messaging, order-routing, transaction-management, or escrow functionality and does not receive or monitor direct user transactions conducted outside the Platform. |
1. ABOUT THIS POLICY
This Global Privacy Policy (“Policy”) describes how MB Platform Services LLC, a Wyoming limited liability company doing business as Manufacturing Bridge (“Manufacturing Bridge,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information in connection with manufacturingbridge.com and services that expressly link to this Policy (collectively, the “Services”).
This Policy applies to personal information about identifiable individuals, including business representatives, owners, employees, contractors, professional contacts, account users, and Website visitors. Information relating only to a legal entity and not reasonably linkable to an individual is not personal information for purposes of this Policy.
Jurisdiction-specific provisions apply only when the relevant law applies to Manufacturing Bridge or to the processing activity. We may voluntarily assist with a comparable privacy request without conceding that a particular statute applies or creating a continuing obligation beyond applicable law and this Policy. A separate written agreement controls where it expressly states that we act only as a processor or service provider on documented instructions for particular information.
2. WHO WE ARE AND HOW TO CONTACT US
| Contact item | Information |
|---|---|
| Legal entity | MB Platform Services LLC d/b/a Manufacturing Bridge™ |
| Business address | 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States |
| Privacy questions and rights requests | legal@manufacturingbridge.com |
| Website | manufacturingbridge.com |
For applicable privacy law, Manufacturing Bridge generally acts as the controller or responsible party for the processing described here, unless a separate agreement states that we process specified information only on behalf of another organization.
3. SERVICES AND DATA FLOWS COVERED
The Services covered by this Policy include the public Website, account registration and authentication, structured business profiles and directory listings, Basic, Gold and Diamond membership administration, legitimacy and sanctions screening, payment and billing workflows, support and legal communications, security operations, and any service expressly opened by Manufacturing Bridge. Not currently available — planned for Q4 2026, subject to programme readiness. Before express launch, MB Reviewed is limited to non-binding interest-list and programme-readiness activity; no application, payment, scheduling, session, Status Decision, badge, or active MB Reviewed status is available.
The Platform does not provide internal user-to-user messaging, order-routing, escrow, marketplace payment, or transaction-management functionality. Users contact and transact with one another directly and independently outside the Platform. Manufacturing Bridge does not receive, route, monitor, or store the content of those outside communications or transactions unless a user separately provides information to us for support, a complaint, enforcement, or legal purposes.
Manufacturing Bridge does not monitor or collect information about the value, outcome, or terms of direct transactions between users, except when information is separately provided to us for support, enforcement, or legal purposes.
4. SOURCES OF PERSONAL INFORMATION
We may obtain personal information from:
- You, including when you register, maintain an account, provide structured profile information, purchase an available service, participate in screening, join an optional non-binding MB Reviewed interest list, contact us, or exercise a privacy right. If MB Reviewed is later opened, this source category may also include information provided through the approved pre-session instruments and live-session process described in Section 8.
- Your organization, account administrators, authorized users, owners, officers, employees, representatives, or advisers.
- Other users or business counterparties when they identify a business contact, submit a good-faith report or complaint, or provide information relevant to support or a dispute.
- Your browser, device, and use of the Services, including security logs, session information, approximate location derived from IP address, and cookie or preference data.
- Payment, hosting, security, communications, electronic-signature, screening, and other service providers supporting active Services.
- Lawful public and commercially available business sources, including company websites, corporate registries, professional directories, sanctions and restricted-party lists, and trade information relevant to legitimacy screening, fraud prevention, or Platform operations.
An organization that provides personal information about another person is responsible for having authority or another lawful basis to do so and for providing any notice or obtaining any consent required by applicable law.
5. CATEGORIES OF PERSONAL INFORMATION WE PROCESS
| Category | Examples | Purposes |
|---|---|---|
| Identifiers and business contact data | Name, business email, telephone number, username, account identifier, IP address, and business or postal address. | Account creation, authentication, notices, support, security, and contact administration. |
| Professional and organizational data | Employer, title, role, authority, ownership or beneficial-ownership information, industry, location, declared capabilities, and structured business-profile information. | Public profiles, directory discovery, account administration, legitimacy screening, and business operations. |
| Account and authentication data | Password hashes, sign-in events, multifactor-authentication status, permissions, account activity, and security events. | Access control, fraud prevention, security, and incident response. |
| Membership, billing, and transaction records with us | Membership tier, service order, price presented, invoice and tax information, payment status, chargeback or refund information, and service history. Complete payment-card numbers remain with the payment provider. | Contract performance, billing, accounting, support, fraud prevention, and legal records. |
| Screening and compliance data | Applicant identity and business information, public-list or public-source search results, risk notes, screening date, reviewer identity, and decision record. | Legitimacy and sanctions screening, fraud prevention, restricted-party compliance, and Platform integrity. |
| Future Trust Seal work product and prelaunch interest records | Before launch: limited interest-list and programme-readiness records. After launch: agreed scope, attestations and consents, session log, reviewer observations or findings, Status Decision, decision identifier, Decision Date, Effective Date, Expiration Date, current status, status-change date, limited status history, and badge-misuse records where applicable. Participant source materials are never received. | Administering the non-binding prelaunch interest list; after future launch, administering the defined-scope review, status period, quality control, badge authorization, programme integrity, complaints, enforcement, and disputes. |
| Support, legal, and compliance communications | Support requests, rights requests, reports, complaints, notices, feedback, and correspondence sent to or from Manufacturing Bridge. | Support, enforcement, legal compliance, dispute handling, and protection of rights. |
| Internet, device, and preference data | Browser, operating system, device or session identifiers, approximate location derived from IP, pages viewed, searches, clicks, errors, logs, cookie choices, and communication preferences. | Service delivery, security, diagnostics, lawful analytics, and honoring choices. |
| Derived operational data | Profile completeness, relevance indicators, classifications, and risk flags derived from submitted, public, or usage information. | Directory organization, security, fraud prevention, and service improvement. Trust Seal and account decisions remain subject to meaningful human review. |
5.1 Sensitive or High-Risk Information
We do not request sensitive personal information unless it is reasonably necessary for a specifically identified security, identity, rights-request, screening, or legal purpose. Do not send passwords, authentication secrets, complete payment-card data, unredacted government identification, medical or health information, employee records, biometric templates, criminal-history information, precise geolocation, export-controlled technical data, another party’s trade secrets, or other highly sensitive information unless we specifically request it and provide an appropriate method.
If unnecessary or unauthorized sensitive information is provided, we may decline to receive it, restrict access, redact it, return it, or delete it. Information used to confirm identity or authority for a privacy request is limited to what is reasonably necessary and is used only for the request, fraud prevention, and related recordkeeping.
6. PURPOSES OF PROCESSING
| Purpose | What it includes |
|---|---|
| Provide and administer the Services | Create and secure accounts, publish authorized structured profiles, provide directory functions, administer memberships and service orders, and respond to support requests. |
| Screening and Platform integrity | Perform legitimacy, sanctions, restricted-party, fraud, abuse, and security screening before activation or payment and when risk reasonably requires. |
| Payments, accounting, and tax | Process charges through a payment provider, issue invoices or records, manage refunds and chargebacks, and meet accounting and tax obligations. |
| Trust Seal prelaunch and future administration | Before launch, administer a non-binding interest list and programme-readiness activities. After future launch, schedule and perform MB Reviewed sessions, maintain Company-created work product, issue and administer Status Decisions, calculate Effective and Expiration Dates, maintain status records, control badge authorization, and protect programme integrity. |
| Security and enforcement | Authenticate users, monitor security events, investigate incidents and complaints, preserve evidence, and enforce Platform rules and legal rights. |
| Directory organization and improvement | Organize profile information, provide relevant search and filter results, diagnose errors, improve accessibility and functionality, and develop aggregated or de-identified insights. |
| Business communications | Send operational, legal, security, billing, and service messages and, where permitted, relevant B2B marketing subject to opt-out rights. |
| Legal compliance and corporate events | Respond to lawful requests, maintain required records, establish or defend claims, and evaluate or complete financing, restructuring, acquisition, or asset-transfer activity under appropriate safeguards. |
Depending on the context and applicable law, processing may be based on performance of a contract, steps requested before a contract, compliance with law, consent, protection of rights and security, or legitimate business interests that are not overridden by the individual’s rights. B2B marketing is a secondary and optional purpose; you may opt out without losing access to core Services. Where consent is legally required, we request it through an appropriate affirmative mechanism and permit withdrawal for future processing.
7. PUBLIC PROFILES AND DIRECT USER RELATIONSHIPS
Structured information that you or your organization designates for public display may be visible to Platform users or the public. This may include company name, business category, location, declared capabilities, authorized business-contact information, membership status, and Trust Seal designation where applicable. Self-Declared information has not been reviewed by Manufacturing Bridge.
Public information may be indexed, cached, copied, or retained by search engines or third parties after it is changed or removed. We cannot control information after an authorized recipient or public visitor independently copies or republishes it.
The Platform enables users to identify contact information and then communicate directly outside the Platform. Manufacturing Bridge does not receive or control those communications, negotiations, contracts, purchase orders, payments, products, or services. Users should use their own nondisclosure or commercial agreements when additional protection is required.
8. TRUST SEAL DATA AND ZERO RETENTION
The Trust Seal architecture comprises Self-Declared and the planned MB Reviewed designation. Self-Declared is the current default profile designation and involves no review by Manufacturing Bridge. Not currently available — planned for Q4 2026, subject to programme readiness. No application, payment, scheduling, review session, Status Decision, badge, or active MB Reviewed status is currently available. An optional interest list, if offered, is non-binding and may collect limited business-contact and preference information but creates no reservation, priority, eligibility, price lock, or launch commitment.
If and when the programme is expressly opened, the participant will display source materials live through screen sharing. Manufacturing Bridge will not request, receive, upload, download, copy, photograph, screenshot, record, transcribe, store, or retain participant source documents, images, videos, logos, or files. Sessions will not be recorded, and participant source materials will remain under the participant’s control. Before launch, Manufacturing Bridge does not request or accept those materials for MB Reviewed.
Before programme launch, Manufacturing Bridge may retain limited interest-list and programme-readiness records. After future launch, it will retain only its own limited work product and programme records: the agreed scope, required attestations and consents, session log, reviewer observations or findings, Status Decision, decision identifier, Decision Date, Effective Date, Expiration Date, current status, status-change date, and a limited status history, together with records reasonably necessary to investigate or prevent unauthorized badge use. Those records will not reproduce or replace participant source materials.
Because Manufacturing Bridge does not possess participant source materials, it cannot provide access to, correct, export, or delete those materials. A rights request concerning a future review will be answered only with respect to Company-created records actually held. The future twelve-month designation period will not change the zero-retention rule or require Manufacturing Bridge to obtain or reconstruct source evidence.
9. LEGITIMACY AND SANCTIONS SCREENING
Before an account is activated and before any fee is requested, accepted, or processed, Manufacturing Bridge may screen the applicant, its relevant owners or representatives, and available business information for commercial legitimacy, sanctions, restricted-party, fraud, security, and legal-risk purposes. Screening may use information supplied by the applicant, lawful public sources, official lists, and qualified service providers.
We retain a limited record sufficient to show that the control was performed, the date, the sources or method used at an appropriate level, material results, and the decision. Detailed copies of public-source records are not retained when a proportionate result record is sufficient. A possible name match is reviewed before a final adverse decision where reasonably practicable and legally permitted.
10. COOKIES, ANALYTICS, AND ONLINE TRACKING
We use necessary cookies and similar technologies to operate and secure the Services and remember privacy choices. Optional analytics, functional, marketing, or embedded technologies are used only as described in our Cookie and Similar Technologies Policy and subject to any notice, consent, or opt-out requirement that applies.
We do not currently sell personal information for money or share personal information for cross-context behavioral advertising as those terms are defined under California law. We will not begin a materially different advertising or data-sharing practice without first updating the applicable notices and providing any legally required choice.
Where applicable law requires recognition of a qualifying opt-out preference signal, including Global Privacy Control for covered activity, we process the signal as required. Browser “Do Not Track” signals may not receive a separate response because there is no universally applicable technical or legal standard for them.
11. AUTOMATED SYSTEMS AND ARTIFICIAL INTELLIGENCE
We may use automated systems to support search, filtering, categorization, translation, profile organization, security, fraud prevention, screening support, and service improvement. These systems may produce incomplete or inaccurate outputs and may be reviewed, adjusted, or overridden by authorized personnel. Before MB Reviewed programme launch, no automated system may process participant source evidence because no such evidence is accepted.
Manufacturing Bridge does not use automated systems to select, recommend, or choose counterparties on a user’s behalf. We do not use solely automated processing to terminate an account or make another decision producing legal or similarly significant effects without meaningful human involvement. If MB Reviewed is later opened, no automated system may grant, deny, suspend, revoke, withdraw, correct, supersede, or recommend a final designation decision.
Participant source materials for MB Reviewed are not currently accepted and, after future launch, will not be processed by Manufacturing Bridge AI systems. We do not use private support or legal communications, non-public screening information, or future Trust Seal work product to train third-party general-purpose artificial-intelligence models. A materially different use requires prior legal, contractual, security, and privacy review and any notice or consent required by law.
12. WHEN AND WITH WHOM WE DISCLOSE PERSONAL INFORMATION
We disclose personal information only as reasonably necessary for the purposes described in this Policy and subject to safeguards appropriate to the recipient and the information. Recipient categories may include:
- Hosting, website, cloud, content-delivery, backup, domain, security, authentication, and technical-support providers.
- Payment and fraud-prevention providers. Manufacturing Bridge does not store complete payment-card numbers.
- Email, productivity, customer-support, accounting, invoicing, electronic-signature, and communications providers used for active business operations.
- Cookie-consent and analytics providers, subject to the choices and controls described in the Cookie Policy.
- After future programme launch, Trust Seal reviewers and quality reviewers engaged for a defined and authorized scope. Before launch, no reviewer receives participant source evidence for MB Reviewed.
- Sanctions, restricted-party, business-information, fraud, and compliance-screening providers.
- Legal, tax, accounting, insurance, compliance, and other professional advisers subject to confidentiality or professional obligations.
- Other users or business counterparties only for information intentionally designated as public or expressly submitted for the relevant interaction.
- Authorities, courts, regulators, law-enforcement agencies, or other persons when disclosure is reasonably necessary to comply with law, protect rights or safety, investigate fraud or security incidents, or establish, exercise, or defend legal claims.
- A potential or actual purchaser, successor, investor, lender, or transaction adviser in connection with a financing, merger, acquisition, reorganization, due-diligence process, or transfer of all or part of the business, under appropriate confidentiality and legal safeguards.
Service providers that process information on our behalf are limited by contractual or professional obligations appropriate to their role. We maintain an internal record of material providers and may update providers as the Services evolve.
12.1 Transfers Requiring Consent
Where Mexican or other applicable law treats a disclosure to an independent third party as a transfer requiring consent, we provide the required notice and request consent through a separate or clearly identified affirmative mechanism. Consent is not requested for a service provider acting only on our instructions or for a transfer covered by a statutory exception. A recipient of a covered transfer is informed of the applicable privacy notice and limitations as required by law.
13. INTERNATIONAL PROCESSING
Manufacturing Bridge is organized in the United States and is administered from the United States and Mexico. Manufacturing Bridge is directed to the markets of Mexico and the United States, and paid services are available in the supported jurisdictions identified at checkout. Registration or payment from another jurisdiction may be held, restricted, or declined until the relevant service and processing have been reviewed. Personal information may be processed in the United States, Mexico, and countries where an authorized service provider operates, subject to applicable law and safeguards.
For personal information subject to Mexican law, international processing and transfers are handled under the applicable notice, contractual safeguards, statutory exceptions, and consent requirements. If European, United Kingdom, Swiss, or another mandatory transfer rule applies to a specific processing activity despite the Platform’s geographic exclusions, we will use a lawful mechanism and supplementary safeguards appropriate to that activity.
14. DATA RETENTION
We retain personal information only for as long as reasonably necessary and proportionate for the purposes described in this Policy, taking into account the active relationship, contractual and statutory obligations, applicable limitation periods, security, fraud prevention, disputes, legal holds, and programme integrity. Before MB Reviewed launch, this may include limited interest-list and readiness records. After future launch, it may also include the minimum Company-created work product and status history reasonably necessary to administer an issued designation. Participant source materials are never received and therefore have no retention period.
| Record type | Retention approach |
|---|---|
| Account, profile, and business-contact data | While the account or relationship is active and for a reasonable period afterward to close the relationship, address claims, and meet legal or security needs. |
| Terms acceptance, membership, and service records | For the period reasonably necessary to evidence the agreement, administer renewals or closure, handle chargebacks, enforce rights, and address claims. |
| Billing, invoice, payment, and tax records | For the period required by applicable tax, accounting, payment, and financial-record laws or a valid legal hold. |
| Screening and compliance records | For the period reasonably necessary to evidence the control, comply with law, prevent repeat risk, and address enforcement or legal claims, using the minimum information reasonably sufficient. |
| Prelaunch interest records and future Trust Seal work product | Before launch, limited interest-list and readiness records are retained only as reasonably necessary for programme communications, planning, suppression, and legal records. After future launch, Company-created work product may be retained for methodology consistency, status administration, badge-use control, programme integrity, enforcement, and disputes. Participant source materials are never received and therefore have no retention period. |
| Future limited Trust Seal status history | Applicable only after programme launch and the issuance of a Status Decision. Retained only as reasonably necessary to document prior public status, distinguish Active, Suspended, Revoked, Expired, Corrected, Withdrawn, and Superseded records, prevent or investigate badge misuse, and protect programme integrity using the minimum information reasonably sufficient. |
| Security, access, and technical logs | According to the applicable security configuration, with longer retention only when reasonably necessary for an incident, investigation, fraud prevention, or legal hold. |
| Support, rights requests, complaints, and legal communications | For the period needed to resolve the matter and preserve relevant contractual or legal rights. |
| Cookie and analytics information | As described in the Cookie Policy and the active provider settings, subject to applicable choices. |
When information is no longer required, we delete, anonymize, or securely isolate it, subject to technical feasibility, legal obligations, and valid preservation holds. Backup copies may remain for a limited rolling period and are not used for ordinary business purposes while awaiting overwrite or secure deletion.
15. SECURITY AND PERSONAL DATA BREACHES
We maintain reasonable administrative, technical, and organizational safeguards designed for the nature of the information, the processing purpose, current technology, and reasonably foreseeable risk. Measures may include access controls, role-based permissions, multifactor authentication, encryption in transit where appropriate, logging, vendor diligence, confidentiality obligations, backups, and incident-response procedures.
No online system can be guaranteed completely secure. You are responsible for protecting credentials, using authorized devices and networks, limiting the information you provide to what is necessary, and promptly reporting suspected unauthorized access.
If a personal data breach occurs, we will investigate, contain, document, preserve appropriate evidence, and provide notifications when and within the period required by applicable law. Where a law permits an extension, delayed notice, law-enforcement coordination, or risk-based determination, those provisions apply.
16. YOUR PRIVACY RIGHTS AND CHOICES
16.1 General Request Channel
Subject to identity or authority confirmation, legal exceptions, and the law applicable to the request, you may ask us to confirm whether we process personal information about you, provide access, correct inaccurate information, delete information that is no longer required, object to or restrict certain processing, withdraw consent for future consent-based processing, update communication choices, or obtain information about covered international transfers.
Submit requests to legal@manufacturingbridge.com. Include enough information to identify the relevant account or interaction and the request, but do not send unnecessary sensitive information by ordinary email. We may deny or limit a request where permitted by law, including when identity or authority cannot reasonably be confirmed, another person’s rights would be adversely affected, records are subject to a legal or security exception, or the request is manifestly abusive or unfounded under applicable law.
16.2 Mexico — ARCO and Related Rights, Where Applicable
An individual whose personal information is subject to the Mexican Federal Law on Protection of Personal Data Held by Private Parties may exercise the rights of Access, Rectification, Cancellation, and Objection (“ARCO”), revoke consent where processing depends on consent, and request limitation of use or disclosure, subject to applicable exceptions.
A request should identify the individual and, if applicable, the representative; describe the right and the personal information concerned; identify a method for receiving the response; and include information reasonably necessary to confirm identity or authority. We will communicate our determination within twenty (20) business days after receiving the request. If granted, we will make the request effective within fifteen (15) additional business days. Either period may be extended once for an equal period when justified by the circumstances and permitted by law.
16.3 California and Other United States Privacy Laws, Where Applicable
A United States state privacy law may provide rights to know, access, correct, delete, obtain a portable copy, opt out of covered sale, sharing, targeted advertising, or profiling, limit certain sensitive-information uses, appeal a decision, or receive equal service when exercising rights. These rights apply only when the relevant statute covers Manufacturing Bridge and the processing activity. We process covered requests and qualifying preference signals within the time and under the conditions required by the applicable law.
Manufacturing Bridge does not currently sell personal information for money or share it for cross-context behavioral advertising. A voluntary response to a request does not concede that a particular state statute applies.
16.4 EEA, United Kingdom, and Switzerland, Where Applicable
The Platform is not offered to users established or located in the European Economic Area, Switzerland, or the United Kingdom. If mandatory local privacy law nonetheless applies to a specific Website visit or processing activity, the individual may have the rights provided by that law, such as access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to a competent authority, and rights concerning certain automated decisions. We respond within the statutory period, including any permitted extension.
17. BUSINESS MARKETING AND COMMUNICATION PREFERENCES
We may send operational, legal, security, billing, account, and service communications necessary to administer an account or relationship. These are not promotional and may continue while an account, service, legal duty, or unresolved matter remains active.
We may send relevant B2B marketing communications where permitted by law. Promotional email may be declined through the unsubscribe method in the message or by contacting us. An opt-out does not prevent necessary operational, transactional, security, or legal communications.
18. CHILDREN’S PRIVACY
The Services are intended for organizations and professional adults and are not directed to individuals under eighteen (18) years of age. We do not knowingly collect personal information from minors through the Services. If we learn that a minor provided information without appropriate authorization, we will take reasonable steps to delete or restrict it, subject to legal obligations and preservation needs.
19. THIRD-PARTY WEBSITES AND SERVICES
The Services may link to third-party websites, tools, or content. Their privacy and security practices are governed by their own notices and are not controlled by this Policy. A link or integration does not constitute endorsement of the third party’s practices. Review the relevant notice before providing information or activating optional third-party content.
20. CHANGES TO THIS POLICY
We may update this Policy to reflect changes in the Services, providers, technology, business practices, or law. We provide notice and request a new choice when required by the applicable Terms, contract, or law. Changes required for legal compliance, security, fraud prevention, provider continuity, correction of an error, or urgent operational integrity may take effect immediately or on shorter notice where permitted.
A new materially different purpose that legally requires consent will not be implemented on notice alone. The Effective Date and Last Updated date identify the current public version. Prior versions may be archived to document the notice in effect at a particular time.
21. LANGUAGE
This Policy is drafted in English, which is the official and controlling version to the maximum extent permitted by mandatory law. A legally reviewed Spanish version should be made available for Mexican onboarding and rights administration before Spanish-language account activation or paid checkout is launched. A courtesy or machine translation must not be treated as controlling and may not expand or reduce rights or obligations.
22. CONTACTS AND COMPLAINTS
Privacy questions, rights requests, revocation requests, limitation requests, and complaints may be submitted to legal@manufacturingbridge.com. We encourage you to contact us so we can review the matter, but doing so does not limit any right to contact a competent authority where applicable.
- Mexico: Secretaría Anticorrupción y Buen Gobierno, or the successor authority with competence under applicable law.
- California: California Privacy Protection Agency or California Attorney General, where applicable.
- European Economic Area, United Kingdom, or Switzerland: the competent supervisory authority, if local law applies to the relevant processing.
| MB Platform Services LLC d/b/a Manufacturing Bridge™ | legal@manufacturingbridge.com Global Privacy Policy — Version 2.5 — Effective July 24, 2026 |