This Privacy Policy explains how BidStack ("we," "us," or "our") collects, uses, and shares information when you use the BidStack platform (the "Service"). By using the Service, you agree to the collection and use of information as described here.

We collect information you provide directly, information collected automatically, and information from third parties:

• Account information: name, email address, company name, role (owner or contractor), trade, and service area.
• Project and bid data: project descriptions, budgets, scopes of work, bid amounts, messages, contracts, lien waivers, and related documents you upload or submit through the Service.
• Payment information: subscription and billing details, processed by our payment processor, Stripe. We do not store full payment card numbers on our own servers.
• Usage data: log data, device/browser information, and interactions with the Service, collected automatically.
• Communications: emails and in-app notifications we send you, and support communications you send us.

We use collected information to:

• Operate and provide the Service, including matching Owners' projects with Contractors and facilitating bids, contracts, and notifications.
• Process subscription payments and manage billing.
• Send transactional emails and in-app notifications (e.g., new bid received, bid awarded, project cancelled).
• Maintain the security, integrity, and proper functioning of the Service, including detecting and preventing fraud or abuse.
• Improve and develop new features for the Service.
• Comply with legal obligations.

We share information between Owners and Contractors as necessary to operate the marketplace (for example, an Owner's project details are visible to Contractors browsing projects, and a Contractor's bid and profile information are visible to the Owner of the relevant project). We also share information with service providers who help us operate the Service, including:

• Supabase — database hosting and authentication.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.

We do not sell your personal information. We may disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets.

We retain account, project, bid, and contract information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described below.

You can access and update most of your account information directly within the Service. You may request that we delete your account and associated personal information by contacting us, subject to information we are required or permitted to retain (e.g., completed contracts, financial records). Depending on where you live, you may have additional rights under applicable privacy laws, such as the right to access, correct, or delete your personal information, or to object to certain processing.

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here with a new "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your information, please contact us through the support channel available in your BidStack dashboard.