Privacy Policy

1. Information we collect

• Account & contact information — your email address and, for beta users, the access code you use. We may capture an email you provide to receive a report or follow-up.
• Content you upload — the bids, documents, and project details (such as an approved budget or carrier settlement amount) you submit for scoring.
• Usage & device data — first-party analytics events (pages viewed and how you arrived), and a device identifier used to enforce our per-account device limit. See “Cookies & analytics” below.
• Payment data — if you subscribe, billing is handled by Stripe; we do not store your full card number.

2. How we use it

• to provide the Service — parse and score bids and generate your report;
• to operate accounts, enforce device limits, and prevent credential sharing and abuse;
• to communicate with you, including follow-up about your report or beta feedback;
• to understand usage and improve the product; and
• to process payments and comply with law.

3. AI and document processing

To score bids we send the contents of uploaded documents to our AI provider (Anthropic) for automated parsing and analysis. This processing is to provide the Service to you. We do not sell your documents.

We do not store your uploaded documents. Files you upload (bid PDFs, scope documents, drying reports, and photos) are used only to generate your report and are then automatically deleted — bid files immediately after scoring, and any remaining uploads within 24 hours. The resulting report and its scores are saved to your account; the source files are not kept. If you want a fresh review later, you’ll upload again.

4. Service providers

We share information with vendors who help us run the Service, under contract, including:

• Supabase — database and file storage;
• Vercel — application hosting;
• Anthropic — AI document analysis; and
• Stripe — payment processing.

We do not sell your personal information.

5. Data retention

Uploaded source documents are not retained — they are deleted after your report is generated (bid files immediately after scoring; any other uploads within 24 hours). We retain the generated report and your account data for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period unless a longer period is required by law. You may request deletion of your data (see below).

6. Security

We use reasonable technical and organizational measures to protect your information, including access controls and private file storage with restricted access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Cookies & analytics

BidsScores uses a small number of first-party cookies and browser-storage entries. We do not use advertising cookies or third-party trackers.

Strictly necessary — these make the Service work and are always on:

• bs_device — a random device ID (kept up to 2 years). It lets us recognize your browser when you sign in, so we can enforce the 3-device limit per account, show your signed-in devices, and prevent credential sharing. It is not used for analytics.
• bs_beta and bs_sso — your signed-in session (30 days);bs_devmgmt — a 15-minute pass to sign out a device when you reach the device limit; and, if you sign in with an account, our database provider’s (Supabase) session cookies.
• lang — your language choice (1 year); bs_consent — your answer on the cookie banner (1 year); and a browser-storage flag that remembers you closed a promotional pop-up.

Analytics — our own first-party page-view measurement. A random session ID (bs_sid) is kept in your browser’s local storage, and each page view sends us the page path, the referring site or campaign tag, and your browser’s user agent. We use this only to understand how the site is used; it is stored in our own database and is not shared with advertisers.

Visitors in the EU, EEA, UK and Switzerland are asked first. If you are in one of those places (based on your IP address’s country), no analytics ID is stored and no page views are sent unless you choose “Accept” on the banner. Choosing “Decline” keeps analytics off and removes the session ID. Strictly necessary cookies are used either way. You can change your choice at any time:

8. Your choices & rights

You may request access to, correction of, or deletion of your personal information, and you may opt out of non-essential communications. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA. To make a request, contact us using the details below.

9. Children

The Service is for business use and is not directed to children under 16.

10. Changes

We may update this policy; the "Last updated" date above reflects the latest version. Material changes will be communicated where appropriate.

11. Contact

For privacy questions or requests, contact sales@bidsscores.com.