1. What we collect
Account information: your name, work email, company name, and password (stored only as a hash by our sign-in provider).
Billing information: your plan, invoices, and a Stripe customer id. Card numbers go directly to Stripe; Bids2Bank never sees or stores them.
Your content: documents you upload, proposal text you generate, pursuits you track, approvals you record, and team members you invite.
Usage information: pages visited, actions taken, browser and device type, IP address, and error reports, used to run and improve the service.
2. Why we use it
To provide the service you signed up for, including drafting and checking proposal text, searching public opportunity data, and recording approvals.
To bill you and to send receipts, renewal notices and service messages.
To keep the service secure, detect abuse, and meet our legal obligations.
To improve the product using aggregate usage patterns. We do not use your content to train AI models.
3. Who sees it
Service providers who process data for us under contract: Vercel (hosting), Supabase (database and sign-in), Stripe (billing), and Anthropic, OpenAI and Google (AI text drafting and checking, through their business APIs; we send only the text a step needs). The current list is kept on our Trust & Security page.
Your team: people you invite to your account see the content in that account according to the role you give them.
Authorities: if the law requires it, or to protect the rights and safety of Bids2Bank, our customers, or the public.
We do not sell personal information and we do not share it with advertisers.
4. Public government data
Opportunity, award and regulation data comes from public sources such as SAM.gov, Grants.gov, USAspending and acquisition.gov. Contact names that appear in those records are public information published by the government; we display them as received.
5. Where it is stored and for how long
Data is stored in the United States. We keep account and content data while your account is open and delete it within 90 days after you close the account, except for billing records and audit logs we must keep for legal, tax or compliance reasons (up to 7 years).
6. Security
Traffic is encrypted in transit and data is encrypted at rest by our hosting providers. Every request is checked against the account that owns the data, and database row-level security blocks direct access to another account’s records. Hand-offs between processing steps are hashed and signed so tampering can be detected (records sealed before 25 September 2026 bind only their top-level fields). See Trust & Security for what is in place today and what is still in progress.
7. Your choices and rights
You can view and edit your account details in Settings, and the workspace owner or an admin can download the workspace’s data as a file from Settings. The owner can delete the workspace from Settings (Danger zone); deleting it removes uploaded files and workspace content, but keeps the signed approval and audit records, review decisions, training records and billing records, which we retain for our audit-record period (target 7 years). To delete your sign-in account itself, email privacy@bids2bank.com. Depending on where you live you may also have the right to access, correct, delete, or restrict use of your personal information, or to object to processing. Email privacy@bids2bank.com and we will respond within 30 days.
We send transactional email (receipts, security notices, invitations) that you cannot opt out of while your account is open. Product updates are optional and every one has an unsubscribe link.
8. Cookies
We use a sign-in cookie that is required for the service to work and a small number of first-party cookies to remember preferences. We do not use third-party advertising cookies.
9. Children
The service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
10. Changes and contact
If we change this policy in a material way we will email the account owner or show a notice in the service before the change takes effect. Questions: privacy@bids2bank.com.
See also the Terms of Service and Trust & Security.