Privacy Policy

Last updated: October 4, 2026

Bidtab reads the subcontractor bid documents you upload and levels them into a side-by-side comparison you can export.

This Privacy Policy explains what Bidtab ("we", "us") collects, how we use it, and the choices you have. It applies to the Bidtab website and application, operated by ProdXP, LLC.

Information we collect

We collect only what the service needs to do its job:

  • Account details you provide when you sign up (name, email, workspace name).
  • The bid documents (PDFs) you upload, and the leveled comparisons and workbooks made from them.
  • Support messages you send us, and our replies.
  • Purchase records from Stripe (what you bought and when; never card numbers).
  • Basic usage and security logs needed to operate the service.
  • If you accept analytics cookies: which pages you visit and a few product events (signing up, uploading bids, a leveling finishing, downloading a workbook), measured by Google Analytics. Never the content of your bids or the names of your projects.

How we use your information

We use the information above to:

  • Provide, operate, and secure the service and your account.
  • Extract terms from the documents you upload and present them for you to confirm.
  • Watch the obligations and deadlines you have confirmed, and draft the follow-ups you approve.
  • Process your subscription and communicate with you about the service.
  • Detect, prevent, and address abuse, security incidents, and technical problems.

We do not sell your personal information, and we do not use the contents of your documents or messages to train our own or any third party's models.

Google user data

If you sign in with Google, Bidtab receives only your name, email address and Google account identifier, through Google Sign-In (the openid, email and profile scopes). We use them only to create and secure your account and to contact you about it. We do not request or access your Gmail, Google Drive, contacts, calendar or any other Google data, we do not sell or transfer Google user data, and we do not use it to train AI models. Bidtab's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payments

Purchases and subscriptions are processed by Stripe. We never receive or store card numbers, CVCs, or bank-account numbers; Stripe tells us only what was bought and whether it was paid.

Bid documents and AI

To level the bids you upload, Bidtab sends their pages to our AI sub-processor (Anthropic's Claude) to read the text and figures. The documents are treated as data, never as instructions. Figures are checked against the page they came from, and anything that can't be verified is shown to you as an open question rather than guessed. We do not use your documents to train models, and our AI provider does not train on them under its commercial terms.

Analytics and cookies

We use Google Analytics 4 to understand how people find and use Bidtab, so we can improve it. It runs only if you accept analytics cookies in the banner shown on your first visit. Until you choose, and if you reject, no Google Analytics script is loaded, nothing is sent to Google, and no analytics cookie is set.

If you accept, Google Analytics receives:

  • The pages you visit, with anything that identifies a project or an invitation replaced by a placeholder (for example, /app/projects/:id), and never the page's query string.
  • A few product events, with counts only: creating an account, uploading bids (how many), a leveling finishing (how many bidders and open questions), and downloading a workbook.
  • Standard technical information your browser sends: device and browser type, screen size, language, an approximate location derived from your IP address, and the website that referred you (its address only, not the page).

We never send your name, email address, bid documents, figures, bidder names or project names to Google Analytics. Advertising features, Google signals and ad personalization are turned off, and we use Google's Consent Mode with every advertising signal denied. Google Analytics 4 does not log or store IP addresses. Google keeps event-level analytics data for 14 months, after which it is deleted; the summary reports we read hold counts only.

Cookies we use

  • Sign-in session (__Host-session, on the app): keeps you signed in. Strictly necessary, so it is set without asking. It lasts 14 days, or until you sign out.
  • Sign-in check (__Host-oauth-binder, on the app): ties a Google sign-in to the browser that started it, so no one else can complete it. Strictly necessary; it lasts ten minutes and is removed when sign-in finishes.
  • Your cookie choice (bidtab_consent): remembers whether you accepted or rejected analytics, for six months, after which we ask again.
  • Google Analytics (_ga and _ga_<id>): set only if you accept, to tell visits apart. They last up to two years unless you clear them or reject analytics.

The app also keeps your getting-started checklist's progress in your browser's local storage; it never leaves your browser.

Changing your choice

You can change your choice at any time with Cookie settings in the footer of our website. Rejecting after accepting stops Google Analytics at once and deletes its cookies from this site. You can also block analytics with your browser's settings or Google's Google Analytics opt-out browser add-on.

Service providers we share with

We share information only with the sub-processors that help us run the service, each bound to protect it and use it only on our instructions:

  • Google Cloud Platform — Cloud hosting, database, and file storage.
  • Anthropic — AI reading of the bid documents you upload (Claude), under commercial terms that exclude training on your content.
  • Postmark — Transactional and inbound email.
  • Stripe — Payment processing for plans and one-time purchases.
  • Google Analytics (Google LLC) — Website and app usage statistics, only with your consent (if you accept analytics cookies); advertising features are off.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and property of Bidtab, our users, or others.

Security

Data is encrypted in transit and at rest. Access to each workspace's data is enforced in the database itself, so one customer's data cannot be reached from another's context, and content is assembled for any outside party from an explicit field-level allowlist.

Data retention

We keep your information, including uploaded bid documents and leveled results, for as long as your account is active and as needed to provide the service. To delete a project, your workspace, or your account, write to [email protected]; we delete or de-identify the content within 30 days, except where we must retain it to meet a legal obligation.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, contact us at [email protected].

International transfers

We process your information in the United States. Where required, we rely on appropriate safeguards for any cross-border transfer.

Children

The service is for businesses and is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date above and, where appropriate, notify you in the app or by email.

Contact us

Questions about this policy or your data? Email us at [email protected].