Privacy Policy
This policy explains what BidDeck collects, why, who helps us process it, how long we keep it, and the choices you have. BidDeck is operated by Marcel Patillo, a sole proprietor doing business as BidDeck. Questions: support@bid-deck.ai.
The short version
- We collect what we need to run BidDeck for your business, and nothing for advertising.
- We don't sell your information or share it for advertising.
- Documents in your file cabinet are never sent to our AI provider.
- Your card details go to Stripe, not to us.
- You can ask for a copy of your data, or for it to be deleted, at any time.
What we collect
- Account details: your name and email address, and a password, which our authentication provider stores in hashed form.
- Your company profile: business name, website, service area, work types and NAICS codes, registrations (such as UEI or CAGE), certifications, insurance and bonding details, equipment, and past performance — whatever you choose to enter.
- Content you add: solicitation packages you upload, documents in your file cabinet, bids, pricing worksheets, notes and proposal drafts.
- Your website: if you give us your company's web address during setup, we read that public page to draft your profile for you to review.
- Billing details: Stripe processes payments. We receive and store your Stripe customer and subscription identifiers, plan and status, and the billing name, address and any tax ID you provide — used for invoices and sales tax. We never receive your full card number.
- Support messages: what you send to our support, billing or general email addresses.
- Usage and device data: to count visits we record the page path, the referring website, device type, country, and a daily anonymous visitor code made by scrambling your IP address and browser details with a secret value that changes the code every day. We don't store your IP address in our analytics. Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting.
We also use public government data — opportunities, awards and agency information from sources such as SAM.gov, USAspending and state procurement sites. That data is about contracts, not about you.
Cookies and local storage
We use cookies only to keep you signed in. Your browser's local storage remembers small preferences, such as saved searches, favorites and notes you haven't finished. We don't use advertising cookies or third-party trackers.
How we use it
- To run BidDeck: matching opportunities to your profile, analyzing solicitations, pricing, drafting proposals, and tracking bids.
- To bill you, collect applicable sales tax, and prevent fraud.
- To keep accounts and company workspaces secure and separate from one another.
- To answer support requests and send account emails: sign-in links, password resets, billing receipts and notices. We don't send marketing email unless you ask for it.
- To understand, in aggregate, how BidDeck is used so we can improve it.
How AI is used
Some features send the content they need to our AI provider, Anthropic: drafting your profile from your website, analyzing a solicitation you upload or open, drafting proposal sections, and drafting profile narratives from the answers you give. These features run when you use them. Under our provider's commercial terms, content sent through its API is not used to train its models. Documents in your file cabinet are not sent to the AI. AI output can be wrong — review everything before you rely on it.
Who we share it with
We share information only with the service providers that run BidDeck, and only what each one needs:
- Supabase — database, sign-in and file storage (United States).
- Vercel — website hosting (United States).
- Anthropic — AI processing for the features above.
- Stripe — payments, invoices, sales tax and fraud prevention.
- Google Workspace — our email, including support and account emails.
- OpenStreetMap services — when you ask BidDeck to measure a site, the facility's address is sent to these public map services.
Inside your company workspace, the members you let in can see the company's data. If you publish your company in the partner directory, other BidDeck companies can see that listing. We may also disclose information when the law requires it, to protect people or BidDeck from harm, or as part of a sale or reorganization of BidDeck, in which case this policy continues to apply. We do not sell personal information.
How long we keep it
- Account and company data: for as long as your account is open. Cancelling a subscription doesn't delete anything — your workspace stays, read-only.
- Billing records: as long as tax and accounting law requires, generally up to seven years.
- Visit analytics: up to 400 days.
- When you ask us to delete your data, we delete your account and company data within 30 days, except records we must keep by law. Copies in our providers' backups expire on their own schedules.
Security
Data is encrypted in transit. Each company's data is kept separate at the database level, access to production systems is limited, and payment card data stays with Stripe. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.
Your choices
- Edit your profile and documents at any time in the app.
- Email support@bid-deck.ai to get a copy of your data, correct something you can't change yourself, or have your account and company data deleted. We may need to confirm it's you, and we'll respond within 30 days.
- Unpublish your partner-directory listing at any time.
Children
BidDeck is a business tool for adults. We don't knowingly collect information from anyone under 18.
Where data is stored
BidDeck is run from the United States, and our database and hosting are in the United States.
Changes to this policy
If we make material changes, we'll tell you by email or in the app before they take effect. The date at the top shows the current version. Our Terms of Service also apply.
Contact
support@bid-deck.ai
Mail: Marcel Patillo, BidDeck, 111 Shirebrook Cir, Spring Hill, TN 37174