Privacy Policy
1. Scope
This policy describes how BidSight (“we,” “us”) collects, uses, and shares information when you use bidsight-151.netlify.app and related services (search, map, alerts, AI drafts, business profiles, and paid features).
2. Information we collect
2.1 Information you provide
- Business profile: business name, NAICS/PSC codes, places of performance (states), set-aside certifications, capability keywords, and optional narrative fields used for drafts (capabilities, past performance notes, differentiators).
- Account contact: email address used for magic-link sign-in, saved-search alerts, order receipts, and service delivery.
- Purchase details: opportunity you selected, product type, amount, and fulfillment content (e.g. AI draft packages).
- Community submissions: opportunity details you voluntarily post for moderation.
- Messages: email or other correspondence you send us.
2.2 Information collected automatically
- Device / browser storage: local preferences and a cached copy of your profile / session
token in your browser (
localStorage) so fit scoring and login can work offline-ish on that device. - Server and hosting logs: standard request metadata (IP address, user agent, timestamps, URLs) via our hosts (e.g. Netlify) for security, debugging, and reliability.
- Payment metadata: Stripe provides payment status and customer identifiers; we do not store full card numbers on BidSight servers.
2.3 Public and third-party data we process (not “your” personal data)
BidSight indexes and displays publicly available government procurement information, including from sources such as SAM.gov, USAspending.gov, and state/local open portals. That data may include company names of awardees and other public contracting facts. We use it to provide market context and related-win insights; it is not treated as private customer data under this policy.
3. How we use information
- Provide search, maps, fit scores, related-win context, and other product features.
- Create and maintain your business profile across devices (when you verify email).
- Send magic-link sign-in messages, saved-search alerts, and transactional messages about purchases.
- Process payments and fulfill paid services (e.g. AI response drafts).
- Moderate community-submitted opportunities and prevent abuse.
- Improve reliability, security, and product quality.
- Comply with law and enforce our terms of use.
We do not sell personal information. We do not use your business profile to cold-email other users about their competitors.
4. Legal bases (where applicable)
Where privacy laws require a legal basis (e.g. GDPR), we rely on: performance of a contract (providing the service you requested), legitimate interests (securing and improving the service, using public procurement data), and consent (where we ask for it, such as optional marketing if we ever add it).
5. How we share information
We share data only with processors that help us run BidSight, under agreements appropriate to the service:
- Hosting & serverless: Netlify (site and functions).
- Database: Supabase / Postgres (profiles, opportunities index, orders, alerts).
- Email delivery: Resend or similar (alerts, magic links, transactional mail).
- Payments: Stripe (checkout and payment processing).
- AI providers: e.g. Anthropic, when you use AI brief or draft features; prompts include opportunity text and the vendor profile fields you submit for that job.
We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).
6. Cookies and local storage
BidSight is primarily a static app. We use browser local storage (not advertising cookies) to:
- Cache your business profile and fit-scoring inputs on this device.
- Store a session token after you verify email via magic link.
- Remember UI state (e.g. map or market panels) where implemented.
You can clear site data in your browser settings. That signs you out of the device-local session and removes the local profile cache; your server-side profile (if any) remains until you ask us to delete it.
7. Profiles, accounts, and fit scores
- Device-only mode: You may use fit scoring with a profile stored only in your browser. That copy is not available on other devices until you save with email verification.
- Cloud profile: When you provide an email and complete magic-link verification, we store your profile on our servers so you can use it for purchases, alerts, and multi-device access.
- Fit scores are rule-based estimates for navigation and prioritization. They are not legal advice, eligibility determinations, or guarantees of award.
8. Payments
Paid features are processed by Stripe. Stripe’s privacy policy applies to card and payment data they collect. We store order records needed for fulfillment, support, and accounting (email, amount, product, related opportunity id, status).
9. Email communications
- Transactional: magic links, purchase confirmations, draft delivery, service notices.
- Product alerts: if you subscribe a search, we email matching opportunities; every alert includes an unsubscribe path.
We do not buy email lists for BidSight marketing spam. If we introduce optional newsletters, we will ask for consent where required.
10. Retention
- Business profiles and sessions: retained while you use the service; sessions expire; you may request deletion.
- Saved-search alerts: until you unsubscribe or we delete inactive subscriptions.
- Orders and drafts: retained as needed for fulfillment, support, tax, and fraud prevention.
- Server logs: typically short-lived, per host defaults.
- Public opportunity index: refreshed and archived as part of product operations (public data).
11. Security
We use HTTPS, access-controlled databases, service-role secrets only on the server, and least-privilege patterns for browser access (public opportunity data vs private profile/order data). No method of transmission or storage is 100% secure; please use a unique email you control for magic links.
12. Children
BidSight is directed at businesses and professionals. We do not knowingly collect personal information from children under 16.
13. International users
We and our processors may store and process data in the United States and other countries where our providers operate. If you access BidSight from outside the U.S., you understand that information may be transferred to those locations.
14. Your choices and rights
- Access or update your profile via the Profile page (after magic-link sign-in).
- Clear local data in your browser at any time.
- Unsubscribe from search alerts via the link in those emails.
- Request export or deletion of your cloud profile and associated personal data by emailing justinpgardner@gmail.com.
Depending on your location, you may have additional rights (access, correction, deletion, restriction, portability, objection). We will respond to verified requests within a reasonable period.
15. Third-party links
Opportunity pages may link to SAM.gov, agency portals, USAspending, and other third-party sites. Their privacy practices are their own; review those policies when you leave BidSight.
16. Changes
We may update this policy as the product evolves (for example, new paid features or processors). We will post the revised effective date on this page. Material changes that affect how we use personal data for cloud profiles or purchases will be called out on the Profile or checkout experience where practical.
17. Contact
Questions about privacy or data requests:
justinpgardner@gmail.com
Subject line: “BidSight privacy”