Privacy Policy

Account data — email address and password (stored via Supabase; passwords are hashed and never visible to us).

Company profile — company name, NAICS codes, certifications, clearance levels, and past performance data you enter voluntarily to improve analysis accuracy.

Uploaded documents — RFP files (PDF/DOCX) you upload for analysis. These are processed by our AI and stored only as needed to deliver your results.

Usage data — pages visited, features used, and timestamps, collected automatically for product improvement.

Payment data — billing is handled by Stripe. We store only your Stripe customer ID and subscription status. We never see or store your full card number.

• To provide, operate, and improve the The Bid Helper service
• To generate AI-powered RFP analysis tailored to your company profile
• To send transactional emails (account confirmation, deadline alerts, digests) — only emails that support your use of the product
• To process payments and manage subscriptions via Stripe
• To detect and prevent fraud or unauthorized access
• To comply with legal obligations

We do not sell your data. We do not use your uploaded RFP documents to train AI models.

Your data is stored in Supabase-managed PostgreSQL databases and object storage hosted on AWS infrastructure in the United States. Uploaded documents are stored in private, access-controlled Supabase Storage buckets with signed URL access only.

We use industry-standard encryption in transit (TLS 1.2+) and at rest. Access to production data is limited to authorized personnel only.

Despite these measures, no system is 100% secure. Please use a strong, unique password and notify us immediately at hello@thebidhelper.com if you suspect unauthorized access.

We use the following third-party processors who may access your data only to perform services on our behalf:

• Supabase — database, authentication, and file storage
• Stripe — payment processing and subscription management
• Anthropic (Claude API) — AI analysis of RFP content
• Resend — transactional email delivery
• Vercel — hosting and infrastructure

Each processor is bound by their own privacy policies and data processing agreements. We do not authorize them to use your data for any purpose other than providing services to us.

We use session cookies required for authentication. We do not use third-party advertising cookies or behavioral tracking cookies. We do not use Google Analytics or Facebook Pixel.

We retain your account data and analysis history for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days, except where retention is required by law (e.g., billing records, which we retain for 7 years per financial regulations).

Uploaded RFP documents are retained as long as the analysis is saved in your account. You can delete any analysis at any time from your dashboard.

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and personal data
• Portability — request your data in a portable format
• Opt-out — unsubscribe from any non-transactional communications

To exercise any of these rights, email us at hello@thebidhelper.com. We will respond within 30 days.

The Bid Helper is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us immediately and we will delete it.

We may update this policy from time to time. We will notify you of material changes by email or by displaying a notice in the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions, requests, or concerns about this policy:

The Bid Helper
hello@thebidhelper.com