Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains what data BidToolkit LLC collects from users of BidToolkit Workspace ("the Service") and how we handle it.

What we collect

• Account information you provide at signup: email, company name, primary state, and password (stored as a salted hash).
• Onboarding preferences: your selected trades, primary counties, and company type.
• Bid interactions: which bids you view, mark tracked, or mark won/lost.
• Standard server logs: IP address, request path, response code, timestamp. Retained for 30 days for security and debugging purposes only.
• Payment metadata from LemonSqueezy: subscription status, tier, renewal date. We never see or store your credit card details; LemonSqueezy handles payment processing.

What we do NOT collect

• We do not use tracking cookies, ad networks, or third-party analytics.
• We do not sell, rent, share, or otherwise transfer your data to any third party for marketing purposes.
• We do not read or index your bid history to build derivative products.

Where your data lives

Your account and bid data are stored in a per-tenant directory on Fly.io infrastructure in a US data center. Each tenant is isolated from every other tenant. Data at rest is protected by underlying disk encryption on the host.

How long we keep it

Your data is retained while your account is active. If your account is expired (trial not converted) or canceled, your data is retained for 30 days and then permanently deleted. Server logs are retained for 30 days.

Your rights

You can request an export of your data in CSV or JSON format at any time by emailing brian@bidtoolkit.com. You can request permanent deletion of your account and all associated data at any time; deletion completes within 7 days.

Communication

We send account-related emails (trial expiration, subscription changes, password resets) via Resend, a US-based transactional email service. We do not send marketing emails unless you specifically opt in.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email to your account address at least 14 days before taking effect.

Contact

Privacy questions: brian@bidtoolkit.com.