1. What we collect
Account information. When you create an account we collect your name, email address, company name, state, and (optionally) phone number. We also store a hashed password and basic security metadata (e.g. last sign-in, 2FA status).
Project and estimate data. Anything you create in BlueBid AI — projects, line items, rooms, alternates, proposals, plan files, bid amounts — is stored on your behalf in our database and file storage.
Usage metadata. We log technical events needed to operate the Service: feature usage counters, AI call counts, error reports (without bid content), page route, browser, OS, and timestamps.
Communications. Emails you send to support@bluebid.ai, and notifications we send you via Resend.
2. How we use it
- To provide and operate the Service for you.
- To improve reliability and diagnose issues (error logs are metadata-only — see Support Access below).
- To enforce usage caps and prevent abuse.
- To communicate with you about your account, billing, security, and product updates.
- To comply with legal obligations or respond to lawful requests.
We do not sell your data, and we don't use your bid content to train AI models.
3. Storage and security
Application data is hosted on Supabase (PostgreSQL + Storage) and Vercel (compute). Connections to the Service are encrypted in transit (TLS). Database connections from our application use Supabase's standard auth, with row-level security policies to keep tenants separated.
Passwords are hashed by Supabase Auth and never stored in plaintext. Optional two-factor authentication is available from your account settings.
(Specific encryption-at-rest, certifications, and breach- notification timing will be confirmed by counsel.)
4. Support access — bid content stays private
Platform support can see technical account metadata (error logs, plan, file types, usage counts) at any time to keep the Service healthy. Support cannot see your bid amounts, proposal text, line item content, or client contact details by default.
If you ask for hands-on help with a specific account issue, you (as a company admin) can grant a time-limited assisted-support session from Admin → Support Access. The session expires automatically (30 min, 1 hour, or 4 hours) and you can revoke it at any time. Even during an active session, dollar amounts and proposal text are masked server-side — support sees structure, not content.
5. Third parties
We share information only with the service providers we need to run BlueBid AI:
- Supabase — database, authentication, file storage.
- Vercel — application hosting and edge functions.
- Anthropic — AI features (Smart Estimate Builder, Plan Analysis, proposal drafting, AI chat). Anthropic processes prompts and returns responses; we do not share data with Anthropic for model training.
- Resend — transactional email (verification, notifications, support replies).
- Stripe (planned) — billing and payment processing. Card details will be handled directly by Stripe; we will not store payment card numbers.
Each provider is contractually bound to use your information only to deliver their service to BlueBid AI.
6. Data retention and deletion
Active project data is retained for as long as your subscription is active. Projects you move to Trash stay recoverable for 30 days and are then permanently deleted by a scheduled job. Error logs are kept for operational windows (typically 90 days). Billing records are kept as required by law.
You can request export or deletion of your account data by emailing support@bluebid.ai. We will respond within a reasonable time frame and may verify your identity before acting on the request.
7. Your rights
Depending on where you live, you may have rights to access, correct, port, restrict, or delete your personal data. To exercise any of these rights, contact support@bluebid.ai. We do not discriminate against users who exercise their privacy rights.
8. Children
The Service is intended for use by businesses and is not directed at children under 16. We do not knowingly collect personal information from children.
9. Changes to this Policy
We may update this Policy from time to time. When we do, we will bump the version shown at the top of this page. Material changes will be brought to your attention before they take effect.
10. Contact
Questions about privacy? Email support@bluebid.ai.