Legal

Privacy Policy

Last updated: 2026-10-12

What we collect

• Account data: email, name, role, company.
• Profile data: trades, credentials, service area, portfolio.
• Project data: plans, SOWs, timelines, budget ranges.
• Bidding data: line items, assumptions, decisions.
• Messages and attachments exchanged on the Platform.
• Usage data: document access logs, IP, user agent, timestamps (for security).

How we use it

• Running the Platform and the workflows you invoke.
• Verifying credentials and issuing trust badges.
• Security monitoring, fraud prevention, and audit.
• Aggregate analytics to improve the product (never sold).

Who sees what

• Builders see their own projects, their bidders, and their audit logs.
• Vendors see project previews for projects they're matched to; full plans unlock per the Terms of Use.
• Admins see the minimum required to verify credentials and moderate.
• No user-level data is sold to third parties.

Encryption

All traffic uses TLS 1.3. All data at rest is encrypted with AES-256.

Retention

Active account data is retained while your account is active. Upon deletion, personal data is removed within 30 days except where required by law or for active dispute resolution.

Your rights

You can access, export, or delete your data at any time. Email privacy@vendorbidding.com.