Privacy Policy

1. Introduction

Bidroom, Inc. ("Bidroom," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction management platform, including our website, mobile applications, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

Personal Information You Provide

• Account Information: Name, email address, phone number, password, and profile photo
• Business Information: Company name, contractor license numbers, insurance certificates, business address
• Financial Information: Bank account details, payment card information (processed securely via Stripe)
• Project Information: Project details, photos, documents, daily logs, and communications
• Identity Verification: Government-issued ID, CSLB license verification data

Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Pages visited, features used, time spent on platform
• Location Data: GPS coordinates for project sites (with your permission)
• Log Data: IP address, browser type, access times, referring URLs

Information from Third Parties

• California State License Board (CSLB) verification data
• Background check results (for verified contractors)
• Payment processing information from Stripe
• Social login information (if you sign in with Google or Apple)

3. How We Use Your Information

We use collected information for the following purposes:

• Provide Services: Create and manage your account, process transactions, facilitate project management
• Verify Identity: Contractor license verification, identity verification, fraud prevention
• Improve Platform: Analyze usage patterns, develop new features, enhance user experience
• Communications: Send notifications, updates, marketing materials (with consent), and support responses
• AI Features: Power AI-driven tools like bid analysis, contractor matching, and project estimations
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Safety & Security: Detect and prevent fraud, abuse, and security incidents

4. How We Share Your Information

We may share your information in the following circumstances:

• With Other Users: Project owners can see contractor profiles; contractors can see project details for jobs they bid on
• Service Providers: Third-party vendors who assist with payment processing (Stripe), email (SendGrid), SMS (Twilio), and cloud hosting
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Consent: When you give us permission to share information

5. Data Security

We implement industry-standard security measures to protect your information:

• TLS/SSL encryption for all data in transit
• Encrypted database storage for sensitive information
• Secure password hashing using bcrypt
• Regular security audits and vulnerability assessments
• Role-based access controls for employee access
• PCI-DSS compliant payment processing via Stripe

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide Services. After account deletion:

• Personal profile data is deleted within 30 days
• Project records may be retained for 7 years for legal/tax purposes
• Anonymized analytics data may be retained indefinitely
• Backup copies are purged within 90 days

7. Your Rights and Choices

California Residents (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act:

• Right to Know: Request information about what personal data we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising privacy rights

All Users

• Access: View and download your data from account settings
• Update: Edit your profile and preferences at any time
• Unsubscribe: Opt out of marketing emails via unsubscribe links
• Delete Account: Request account deletion by contacting support

8. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze platform usage and performance
• Provide personalized experiences

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

9. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification for significant changes
• Displaying a prominent notice on our platform

Your continued use of our Services after changes constitutes acceptance of the updated policy.