Privacy Policy

1. Introduction

BidWay (“BidWay,” “we,” “our,” or “us”) provides a software-as-a-service platform that helps businesses manage their bidding workflow. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our website or use our services (collectively, the “Service”).

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information you provide

• Account information: name, email address, password, company name, role, and billing details when you sign up or subscribe.
• Content: data you create, upload, or input into the Service (for example, vendor records, bids, notes, and uploaded files).
• Communications: messages you send to us, including support requests and feedback.

2.2 Information collected automatically

• Usage data: pages viewed, features used, actions taken, search queries, and other interactions with the Service.
• Device and log data: IP address, browser type, operating system, device identifiers, referrer URLs, and timestamps.
• Cookies and similar technologies: used for authentication, preferences, security, and aggregate analytics. See our Cookie Policy for details.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate users, process payments, and prevent fraud or abuse;
• Personalize your experience and remember your preferences;
• Respond to support requests and communicate with you about your account, updates, and service-related notices;
• Monitor and improve performance, reliability, and security;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your content to train third-party machine learning models.

4. How We Share Information

We share personal information only as described below:

• Service providers: with vendors that perform services on our behalf (for example, cloud hosting, payment processing, error monitoring, and customer support tooling), under contracts that limit their use of the data.
• Within your organization: if your account is part of a team or organization workspace, your administrators and authorized members may have access to data associated with that workspace.
• Legal and safety: when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of BidWay, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

5. Data Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, access controls, optional multi-factor authentication, and regular monitoring. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as your account is active and only as long as needed to provide the Service. Specific retention periods:

• Account and content data: retained while the account is active and deleted within 30 days of account cancellation, unless you request earlier deletion.
• Encrypted backups: rotate out and are permanently purged within 90 days of account cancellation.
• Activity logs and audit logs: retained for 12 months for security and abuse-prevention purposes.
• Anonymized, aggregated usage data: may be retained indefinitely because it cannot be tied back to an individual.

We may retain limited information beyond these periods where required by law (for example, tax, accounting, or fraud-prevention obligations), or to resolve disputes and enforce our agreements.

7. Your Rights

Subject to applicable law, you may have the right to access, correct, update, port, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise many of these rights from your account settings, or by contacting us at privacy@bidway.co. We respond to verified requests within the timeframes required by applicable law.

If you are located in the European Economic Area, the United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or CCPA/CPRA. We do not sell or “share” personal information as those terms are defined under California law.

8. International Data Transfers

BidWay is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

9. Children’s Privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from children under the age of 13 in the United States, or under 16 in the European Economic Area and the United Kingdom. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: privacy@bidway.co
• Mail: BidWay, LLC · 30 N Gould St Ste. N · Sheridan, WY 82801 · United States