This document applies to use of BidKit. Related legal documents in the legal center may also apply depending on how the platform is used.

Scope

This Privacy Policy applies to information collected through BidKit, including account creation, authentication, onboarding, document management, approvals, communications, and online payment flows.

This policy does not govern the privacy practices of businesses that use the platform to serve their own clients, except to the extent we process information for them as part of providing the platform.

Information We Collect

We collect information you provide directly, information generated through use of the platform, and limited technical information associated with access and security.

  • Account and business details, such as name, email address, phone number, business name, addresses, and onboarding responses.
  • Client and project information, such as names, email addresses, phone numbers, service addresses, notes, signatures, estimates, invoices, attachments, and payment schedules.
  • Payment-related information, such as processor tokens, payment status, transaction amounts, settlement events, and limited payment metadata. Full card and bank account details may be collected directly by our payment processors rather than stored by us.
  • Technical and security data, such as IP address, browser or device details, timestamps, session information, and logs needed to authenticate users, detect abuse, and keep the platform secure.

How We Use Information

We use information to operate, secure, improve, and support the platform, to communicate with users, and to provide the features requested by users and their clients.

  • Create and manage accounts, authenticate users, and maintain access sessions.
  • Generate, store, send, and display estimates, invoices, approvals, emails, PDFs, public links, and related records.
  • Facilitate payment flows, reconcile payment status, prevent fraud, and respond to payment disputes, reversals, or processor requests.
  • Provide customer support, troubleshoot issues, monitor performance, and protect the integrity of the platform.

How We Share Information

We share information only as reasonably necessary to provide the platform, comply with law, protect the platform, or complete actions that users request.

  • With the business and its authorized users when information relates to that business’s projects, documents, or customers.
  • With service providers that help us deliver the platform, such as hosting, infrastructure, email delivery, authentication, and payment processing providers.
  • With payment processors and financial service providers when needed to complete, verify, or administer transactions.
  • With courts, regulators, law enforcement, or other parties when required by law or when reasonably necessary to protect rights, property, safety, or the integrity of the platform.

Cookies and Similar Technologies

We use cookies and similar technologies to keep users signed in, remember preferences, protect sessions, and support core platform functionality. More detail is available in our Cookie Policy.

If we add analytics, performance, or similar optional technologies in the future, we may update this policy and, where required, provide additional notice or consent controls.

Data Retention and Security

We retain information for as long as reasonably necessary to provide the platform, comply with legal obligations, resolve disputes, enforce agreements, and maintain business and security records.

We use administrative, technical, and organizational measures designed to protect information, but no system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and devices.

Your Choices and Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, export, or limit certain uses of your personal information. You may also be able to opt out of non-essential communications.

We may need to verify your identity or authority before acting on a request. Some information may be retained where necessary for legal, accounting, security, payment, or contractual reasons.

Children, International Transfers, and Changes

The platform is intended for business and professional use and is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.

Our providers and infrastructure may process information in jurisdictions other than the one in which you live. By using the platform, you understand that information may be processed where we or our service providers operate, subject to applicable safeguards.

If we change this policy, we may update the effective date and provide additional notice where required by law.

Contact

For privacy-related questions, requests, or complaints, use the support or privacy contact information that we make available on the platform or through your account and subscription materials.