BidRok ("BidRok," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use our construction estimating and takeoff platform (the "Service"). We are committed to transparency and to giving you control over your information.
Account data: Name, email, company name, trade, region, and role. We use this to provision your workspace and communicate with you.
Project data: Drawings, measurements, estimate rows, assemblies, crew rates, and price library entries you create. This is company-scoped and not shared across organizations.
Usage data: Pages visited, features used, and job queue events. We use this to improve the product and detect issues.
Waitlist data (pre-seed): If you join our early access waitlist, we collect your email and optionally your name, company, and use case. This is used solely to contact you about onboarding.
We do not sell your personal information. We do not use your project data to train AI models for other customers.
Your data is stored in a Turso/libSQL database hosted on AWS (eu-west-1). All connections are encrypted via TLS. Passwords are hashed with bcrypt. Session cookies are httpOnly and SameSite-protected.
Access to production data is restricted to authorized BidRok team members. We use role-based access control and audit logging for administrative actions.
When you trigger a price search, BidRok's background worker queries external vendor websites and returns price suggestions with confidence scores and source URLs. The query text (e.g., "12.5mm plasterboard tapered edge") is sent to search APIs; your full project data is not transmitted.
AI-suggested prices are stored in your estimate rows with the source and confidence recorded for auditability. You can override or reject any AI suggestion.
We share data with third-party service providers only as necessary to operate the Service:
We do not share your data with advertising networks, data brokers, or other BidRok customers.
You have the right to:
To exercise these rights, email privacy@bidrok.com. We respond within 30 days.
For users in the European Economic Area (GDPR): BidRok acts as a data controller. The legal basis for processing is performance of a contract (providing the Service) and legitimate interests (improving the platform). You have the right to lodge a complaint with your local data protection authority.
For users in California (CCPA): You have the right to know what personal information we collect, request deletion, and opt-out of any sale. BidRok does not sell personal information.
We retain your data for as long as your account is active. After account termination, we retain data for 30 days to allow for recovery, then permanently delete it. Job queue records are retained for 90 days for debugging, then purged.
BidRok uses a single httpOnly session cookie to maintain your login. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before taking effect.
Questions about your privacy? Contact us at privacy@bidrok.com.