Organisation Administrator Privacy Guide

1. The privacy promise behind the pilot

Bridget gives each participant a private space for AI-supported coaching. Organisation administrators can manage participation and understand broad adoption. They cannot inspect, supervise or evaluate a person's coaching content.

This boundary is central to the pilot. It supports trust, honest reflection and responsible use. It is not a configurable employer permission.

2. What an organisation administrator can see

An authorised organisation administrator may see:

• the names and work email addresses supplied for pilot administration;
• invitation, activation and current membership status;
• available, allocated and scheduled seat quantities;
• the total number of people who have completed activation;
• the total number of qualifying conversations across the organisation;
• the number of distinct active members for the reporting period; and
• aggregate weekly adoption information when the privacy threshold is met.

A conversation counts only after the participant sends an accepted message. An active member is a distinct participant who sends at least one accepted message in the reporting period.

3. What an organisation administrator cannot see

An organisation administrator cannot see:

• participant messages or Bridget's replies;
• topics, keywords, summaries or sentiment;
• private conversation titles;
• individual conversation counts;
• dates or times when a particular person used Bridget;
• whether a named participant used Bridget after joining;
• crisis-detection information;
• participant data exports, deletion requests or support conversations; or
• an individual coaching-performance score.

Quantum, Rise & Thrive Global and the Customer must not represent Bridget as an employee-monitoring, productivity-scoring or performance-management tool.

4. Aggregate reporting threshold

Weekly adoption information is available only when at least five people have joined the organisation in Bridget. Below that threshold, the report is withheld because a small group may make individual behaviour easier to infer.

The Customer must not combine Bridget's aggregate figures with other information to try to identify a participant's activity.

5. Customer responsibilities

The Customer will:

• nominate authorised administrators and remove access when no longer needed;
• provide only accurate information needed for invitation and eligibility;
• tell participants that joining is voluntary unless a separate lawful basis has been established and clearly explained;
• avoid asking participants to reveal coaching content;
• avoid rewarding, penalising or evaluating a person based on suspected use or non-use;
• keep exported administration data secure;
• report suspected unauthorised access promptly;
• approve participant countries before invitations are sent; and
• direct privacy requests about Bridget to Quantum rather than attempting to access participant content.

6. Administrator access and account security

Administrator access is personal and must not be shared. Administrators must:

• use a unique password and any available multi-factor authentication;
• keep invitation lists and exports in approved systems;
• sign out on shared devices;
• check recipients before sending or re-sending invitations; and
• contact support immediately if an account or invitation appears compromised.

Quantum records content-free security and administration events to operate and protect the service. The audit record may show who performed an administrative action and which resource was affected, but it must not contain coaching content, participant names or email addresses where an opaque identifier is available.

7. Invitations and manual approval

The Customer may nominate a participant, but nomination does not create an automatic right of access. Quantum's Platform Admin manually checks and grants pilot access.

The approved flow is:

1. The Customer supplies the minimum invitation details.
2. Bridget sends a neutral invitation or registration message.
3. The participant registers and confirms the required notices.
4. Quantum manually checks pilot eligibility and country approval.
5. Access is granted or declined.

The Customer should not promise immediate access or ask Quantum to bypass the approval and consent controls.

8. Adding participants outside Australia

The Pilot Schedule must list each country from which participants may use Bridget. No participant outside the approved countries should be invited until Quantum has confirmed:

• the relevant privacy and consumer disclosures;
• international data-transfer arrangements;
• current crisis resources;
• the responsible contracting and billing entity; and
• any country-specific restrictions or notices.

Describing Bridget as a pilot does not remove these obligations.

9. Removing a participant

Removing a person from the organisation releases the seat and ends their organisation access. It does not authorise the Customer to receive their coaching content. Historical aggregate figures remain valid without exposing the former participant.

Quantum will handle any participant request for access, export, correction or deletion under the Pilot Privacy Notice and applicable law.

10. Incidents and concerns

Report a suspected security or privacy incident to support@riseandthriveglobal.com as soon as possible. Include:

• what happened;
• when it was noticed;
• the affected account or organisation identifier, if known; and
• a safe contact for follow-up.

Do not email coaching content, passwords, API keys or payment details.

11. Questions and support

Pilot operations, privacy, security, accessibility and billing: support@riseandthriveglobal.com