Privacy in this preview
What BidCivic stores and why.
Public browsing
You can browse without an account. Search terms appear in the page URL and may appear in hosting access logs. This application does not install advertising trackers or analytics cookies.
Accounts and saved items
Accounts store your name, email, a salted password hash, saved searches, and watchlist. A secure session cookie keeps you signed in. Account information is stored in the deployment’s database. Do not put sensitive business information in search queries.
External providers
Support requests and operator responses are stored with your account and visible to authorized operators. They are removed when the account is deleted; protected backups may retain copies until they expire. Requests are handled inside the product, without automatic email notifications.
Business profiles, private contract intake, qualifications, bid drafts, estimates, quotes, submission records, revision history, uploaded files, and watchlist notes are private to your account. When you explicitly request AI suggestions, the configured AI provider receives your business profile (excluding pricing notes), response sections, requirement checklist, and selected solicitation text, including uploads marked as solicitation/addendum. Internal notes, estimates, quotes, receipts and other private file contents are excluded. Public source summaries and meeting extraction use public source text and may be shared across users.
Listing images load from their source hosts, which receive your IP address. Following a source link takes you to that provider’s website. If email delivery is enabled, your email address and message content are processed by the email provider. Payments, when enabled, are handled by Stripe; this site does not store card numbers.
Deleting your account
Recurring email alerts can be paused in Settings or through the unsubscribe link in an alert. We record delivery attempts, provider receipt identifiers and delivery events to diagnose failures. Bounces and complaints block further email to that address. A hashed address and minimal delivery-event records may remain after account deletion to honor these blocks and investigate delivery problems; they do not contain the message body. Opening an unsubscribe link asks for confirmation; email providers can also submit a one-click unsubscribe.
Project research, matching feedback, awards, eligibility records and capacity plans are stored with your account. Coverage and monitoring setup requests are visible to authorized operators. When you create a partner invitation, anyone holding its private link can read the scope and explicitly selected files and submit a quote until the link expires or is revoked. Editing the invitation replaces the link. Downloaded copies cannot be recalled. Internal bid notes and unselected files are not shared through the portal.
Account settings let you delete an account without billing history, including its saved searches, watchlist, business profile, private contract intake, qualifications, bid drafts, uploaded files, and queued emails, project research, capacity records and partner invitations. Copies may remain in protected backups until those backups expire. Accounts linked to billing require operator assistance to handle subscription and monitoring setup payment records. Starting a setup checkout also requires operator assistance for account closure until its payment status is resolved.
Limited pilot
A published operator contact and final retention policy are still being established. This preview is intended for a limited pilot while those details are completed.