Privacy Policy

This Privacy Policy explains how BidNail (“we”, “us”) collects, uses, discloses, and safeguards information when you use the BidNail platform (the “Service”). We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

• Account information: name, email address, and password (stored only as a salted hash).
• Company & business profile: company name, trade type, license/insurance details you choose to provide, service area, branding, and logo.
• Client & document data: the client records and document content you create in the Service.
• Billing information: processed and stored by Stripe. We store only a Stripe customer identifier and subscription status — we never see or store your full card number.
• Usage & technical data: log data, device/browser information, and IP address used to operate, secure, and improve the Service.

2. How We Use Information

• To provide, maintain, and improve the Service.
• To generate AI-assisted documents at your request.
• To process subscriptions and payments through Stripe.
• To send transactional communications (e.g. account, password reset, billing, and security notices).
• To secure the Service, prevent abuse, and comply with legal obligations.

3. Legal Bases (GDPR)

For users in the European Economic Area and the United Kingdom, we process personal data under the following bases: performance of a contract (to deliver the Service), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain cookies), and legal obligation. You have the right to access, rectify, erase, restrict, or object to processing, and the right to data portability. You may exercise these rights by contacting [email protected], and you may lodge a complaint with your local supervisory authority.

4. Your California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. We will not discriminate against you for exercising these rights. To make a request, contact [email protected].

5. How We Share Information

We share information only with service providers who help us operate the Service, under contractual confidentiality obligations, including:

• Stripe — payment processing and subscription management.
• Cloud hosting and storage providers — to host the application and store files (e.g. company logos).
• AI processing providers — to generate document drafts you request.

We may also disclose information if required by law or to protect our rights and users. We do not sell your data.

6. Data Retention

We retain your account and content for as long as your account is active. If you cancel, we retain data for a limited period to allow reactivation and to meet legal, tax, and accounting obligations, after which it is deleted or anonymized. Billing records are retained as required by law. You may request earlier deletion as described below.

7. Account Deletion

You may request deletion of your account and associated personal data at any time by emailing [email protected] from your account email, or via account settings where available. Upon verified request we will delete your account, company profile, clients, and documents, except information we are legally required to retain (such as transaction records). Deletion is irreversible.

8. Security

We use industry-standard safeguards including encryption in transit (TLS), hashed passwords (bcrypt), access controls, and scoped data access so that each account can only access its own data. No method of transmission or storage is 100% secure, but we work to protect your information.

9. International Transfers

We operate in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. under appropriate safeguards.

10. Children

The Service is not directed to individuals under 18 and we do not knowingly collect their data.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

12. Changes

We may update this Policy from time to time. Material changes will be communicated through the Service or by email.

13. Contact

Questions or privacy requests: [email protected].