Skip to content
BidTroller
Draft for attorney review. This document is not yet in effect and may change. Bracketed items are open decisions.

Privacy policy

[Effective date: TBD.] This policy explains what BidTroller LLC ("BidTroller," "we") collects when you use bidtroller.com and the BidTroller service, and what we do with it.

What we collect

  • Account information: name, work email, company, and role, provided by you or your company administrator.
  • Content your company sends us: emails forwarded to your BidTroller address (bid digests, GC invitations, and their attachments), and settings such as office locations and service areas.
  • Usage records: which opportunities users open, status changes, notes, and sign-in events. These power the activity history your company sees.
  • Technical data: IP address, browser user agent, and timestamps, used for security, for sign-off records, and to keep the service running.
  • Public listings: procurement information published on public websites. This is not personal information about you, though listings may name agency contacts.

How we use it

  • To provide the service to your company: finding, organizing, and delivering opportunities.
  • To secure the service, prevent abuse, and keep records your company or we are required to keep.
  • To communicate with you about the service.

We do not sell personal information. We do not use your company's data, in identifiable form, to train, fine-tune, or otherwise improve AI models without written consent.

Who processes it for us

We use service providers to host and run BidTroller, including [hosting: Vercel], [database and file storage: Supabase], [email delivery: Resend], and [AI processing: Anthropic]. [Final subprocessor list and links: TBD.]

How long we keep it

[Retention periods: TBD. Not yet decided.] Some records, such as billing and usage records, may be kept for a period required by contract or law.

Your choices

Your company administrator controls most data in your company's account. [Access, correction, deletion, and export request process: TBD.]

Security

Each company's data is separated in the database with row-level security, and the site is served only over HTTPS. See our Security & data page.

Contact

[Privacy contact address: TBD.]