Privacy Policy

1. Who We Are

BidCraft (“we,” “us,” or “our”) operates the BidCraft platform, an AI-powered proposal writing service for contractors and tradespeople. We are headquartered in Virginia, USA.

2. Information We Collect

• Account information: Email address, password (hashed), company name, contact name, phone number, and trade license number when you register.
• Proposal data: Client names, project addresses, job descriptions, pricing, and proposal content you create.
• Payment information: Billing details are processed by Stripe. We do not store full card numbers on our servers.
• Usage data: Pages visited, features used, proposal view analytics, and timestamps.
• Files: Photos and receipts you upload, stored securely in Supabase Storage.

3. How We Use Your Information

• To provide, operate, and improve the BidCraft service
• To generate AI-powered proposals using Anthropic's Claude API (your job descriptions and client details are sent to Anthropic for processing)
• To process payments through Stripe
• To send transactional emails (proposals, follow-ups, review requests) via Resend
• To respond to support requests
• To comply with legal obligations

4. Third-Party Services

BidCraft uses the following third-party services that process your data:

• Supabase — database and authentication (data stored in US East region)
• Anthropic (Claude API) — AI proposal generation. Job descriptions and client context are sent to Anthropic. See Anthropic's Privacy Policy.
• Stripe — payment processing. See Stripe's Privacy Policy.
• Resend — transactional email delivery

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, email us at privacy@bidcraft.app.

7. Cookies

We use essential cookies for authentication (managed by Supabase). We do not use advertising or tracking cookies.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security in our database. No system is 100% secure; please use a strong, unique password for your account.

9. Children's Privacy

BidCraft is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Your continued use of BidCraft after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Contact us at privacy@bidcraft.app or visit our Contact page.