Last updated: July 2026
Account data: your name, email, and password hash when you sign up or accept a team invite. Customer Data: the contacts, deals, appointments, proposals, invoices, photos, and notes you or your team enter. Usage data: basic request logs (IP address, timestamps) used for security and abuse prevention, such as rate-limiting repeated login or signup attempts.
We use collected data to operate the Service (display your dashboard, send the emails and SMS you configure, process payments you initiate, sync your calendar), to secure accounts, and to improve the product. We don't sell Customer Data.
Only for the integrations you turn on, data is shared with: Stripe (invoice payments), Twilio (SMS reminders), Resend (transactional email), Google (calendar sync), Radar (address autocomplete/geocoding), Plaid (read-only bank transaction sync), and Anthropic (AI-assisted takeoff suggestions, sent only the plan sheet you upload for that feature). Each acts under its own privacy policy and only processes what that specific feature requires.
If you enter your own customers' contact information into BidproFX, you are the data controller for that information and are responsible for having a lawful basis to store and process it (for example, having told your customers how you use their data). We act as your processor for that data.
We retain account and Customer Data for as long as your account is active. You can request deletion of your account and its data at any time by contacting us; [add your actual retention window and deletion process here].
Passwords are stored hashed, not in plain text. Access to another account's data requires either that account's own credentials or explicit platform-admin action, which is logged.
The Service is intended for business use and is not directed at children.
We may update this policy from time to time and will change the date above when we do.
Questions about this policy, or want your data deleted? [Add your support email here.]