Last updated: August 10, 2026 · Version 1.0 (Beta)
Your bid data is your competitive edge. We collect only what the product needs to run, we do not sell it, we do not train shared AI models on it, and we never show one contractor's numbers to another. Attack traffic is monitored and logged so your data stays protected.
We do not collect payment card data during the free beta. We do not knowingly collect information from anyone under 18.
To operate the Service (store your pipeline, compute win-probability, extract plan quantities, draft replies), to secure it (detecting and blocking intrusion attempts), and to improve it (aggregate, de-identified usage patterns only). AI drafting requests are processed by our language-model provider under contractual terms that do not permit training on your content.
Only subprocessors that run the Service: hosting infrastructure (currently Render, Inc.), and language-model processing (currently Anthropic, PBC). We may disclose information if required by law, and we will notify you of legal demands where lawfully permitted. We never sell personal information, and we never share your bids, pricing, or win rates with other customers, GCs, or data brokers.
Customer content is retained while your account is active. On verified request, we export and/or delete your content from active systems within 30 days. Security logs are retained up to 12 months for incident investigation, then deleted.
Transport encryption (HTTPS/TLS) on all traffic; security headers (CSP, HSTS, frame-deny); automated intrusion detection with signature flagging and auto-blocking; rate limiting on every API route; least-data logging. No system is perfectly secure — if a breach affects your data, we will notify you without undue delay, consistent with applicable law, including Nevada's breach-notification statute (NRS 603A).
You may request access, correction, export, or deletion of your personal information at any time. Nevada residents may exercise rights under NRS 603A; California residents may exercise CCPA/CPRA rights (access, deletion, correction, and opt-out of sale — noting we do not sell personal information). We do not discriminate against you for exercising these rights.
The beta uses no third-party advertising trackers and no cross-site cookies. Any session storage is used solely to keep you signed in and remember interface preferences.
Material changes to this policy will be announced in-product at least 14 days before taking effect. Questions or requests: contact the Keybid team through the in-product feedback link. (A dedicated privacy@ address will be published with our production domain.)