Privacy Policy

Bidnator is operated by Bidnator ("we", "us"). This policy explains what we collect when you use Bidnator, why, and the choices you have. For any privacy question or request, contact the contact address on our website.

• Account details: your name, email address and password (stored hashed by our authentication provider), or the basic profile Google or Facebook shares if you sign in with them.
• Company profiles: what you enter about your businesses, such as services, codes, locations, staff numbers, revenue, certifications, licenses, insurance, staff certifications, past projects and notes.
• Bid activity: the bids matched to your companies, the readiness reports generated, and the statuses and notes you add.
• Billing: your plan and subscription status. Card details are handled by Stripe and never reach our servers.
• Technical data: sign-in cookies, and if you accept analytics, page views and clicks on links and buttons. We never record what you type, and web addresses are stored without their search terms.

• To run the service: match public bids to your companies and produce readiness reports.
• To bill your subscription and keep your account secure.
• To understand which features are used and improve them (analytics, only with your consent).
• To contact you about your account or important changes. We don't sell your data or use it for advertising.

When you generate a readiness report, the bid details and the relevant company profile are sent to our AI provider (Anthropic), which may also fetch the public bid page. Anthropic does not use this data to train its models. Reports can contain mistakes, so always confirm requirements in the official bid documents.

• Supabase: database and sign-in.
• Vercel: hosting and, with consent, analytics.
• PostHog (United States): product analytics, only with your consent.
• Anthropic: AI processing described above.
• Stripe: payments and invoices.
• Google or Facebook: only if you choose to sign in with them.

We use essential cookies to keep you signed in and remember which company you're viewing; the service can't work without them. Analytics loads only if you click Accept on the cookie banner. Your choice is stored on your device; clear your browser storage to be asked again.

Each account can only see its own companies, matches and reports. All traffic uses HTTPS. We keep your data while your account is active. When you delete your account, it and your company data are deleted straight away, apart from billing records we must keep by law.

You can access, correct or export your data, withdraw consent for analytics, and delete your account at any time from the Account page or by contacting the contact address on our website. Depending on where you live (for example under GDPR or CCPA), you may have further rights, including complaining to your data protection authority.

Bidnator is a business service for people aged 18 or over and is not directed at children.

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.