Legal

Privacy Policy

Last updated: August 14, 2026

Effective Date: 08/14/2026

BidCopilot, LLC (“Company,” “we,” “us,” or “our”) provides an online platform for businesses, primarily contractors, available at www.bidcopilot.com (the “Website”). This Privacy Policy (“Policy”) explains how we collect, use, and disclose personal information about you when you visit the Website, create an account, or otherwise use the services (including software) and products accessible via the Website or otherwise made available to you by us (together with the Website, the “Services”).

Please read this Policy carefully. By using the Services, you acknowledge that you have read and understand this Policy.

Scope of This Policy
Information We Collect
How We Use Personal Information
Categories of Personal Information We Collect, Disclose, and Share
Cookies, Analytics, and Advertising
Your Choices
How We May Disclose Personal Information
Your Privacy Rights
How Long We Keep Personal Information
Security
Children’s Privacy
Changes to This Policy
How to Contact Us

Scope of This Policy

We are a business-to-business company. This Policy applies to personal information we collect about our business customers and prospective business customers, their representatives, and visitors to the Website.

This Policy does not apply to:

Information our business customers enter about their own customers, prospective customers, or projects. We process that information on our business customer’s behalf and at its direction, and our customer is responsible for it. If you are a customer or prospective customer of a contractor that uses our Services, please direct any privacy questions or requests to that contractor. The contractor’s own privacy policy governs its handling of your information. If we receive a request from you directly, we will refer it to the applicable business.
Personal information about our own employees, contractors, or job applicants.
Third-party websites or services. The Services may link to or interoperate with websites and services we do not control. This Policy does not apply to them, and we are not responsible for their privacy practices.

We offer the Services in the United States and intend them for use by U.S. residents.

Information We Collect

2.1 Information You Provide to Us

Account and contact information: such as your name and email address.
Login credentials: the username and password you use to access your account. Authentication is managed through our identity-management provider.
Billing information: subscription and transaction records. Payments are processed by our third-party payment processor. We do not collect or store full payment card numbers.
Service content: proposals, bids, estimates, job and project records, and other content and history you create, enter, or upload when using the Services.
Communications: information you provide when you contact us with a support request, question, or other message, and our responses.

2.2 Information We Collect Automatically

When you visit the Website or use the Services, we and our service providers automatically collect:

Device and connection information: such as IP address, browser type and version, device type, operating system, and unique device or session identifiers.
Usage and activity information: such as pages and screens viewed, features used, links clicked, access times and dates, and the page you visited before navigating to the Services.
Information collected through cookies and similar technologies: as described in Section 5.

We may derive location (such as city or region) from your IP address.

2.3 Information We Receive from Other Sources

From our business customers about other individuals. Our business customers enter or upload information about their own customers, leads, and jobs. As explained in Section 1, we process that information on the business customer’s behalf.
From our service providers. We receive information from the vendors that support the Services, such as our payment processor, authentication provider, and analytics provider.

2.4 Sensitive Personal Information

Certain state privacy laws treat some categories of information as “sensitive.” We use and disclose account log-in credentials (username and password) solely to authenticate you, to provide and maintain the Services, and to secure your account and prevent fraud.

We do not intentionally collect Social Security numbers, government identification numbers, financial account access credentials, precise geolocation, biometric or genetic data, health information, or information about race or ethnicity, religion, sexual orientation, immigration status, or union membership. Please do not submit such information through the Services.

How We Use Personal Information

We use the information we collect to provide, maintain, and improve our Services. We specifically use the information to:

Create, administer, and secure your account, including authenticating you when you log in.
Process subscription payments and billing, and to maintain related transaction records.
Respond to your questions, requests, and support inquiries, and to communicate with you about the Services.
Send you administrative, transactional, and service-related messages, such as confirmations, technical notices, security alerts, and changes to our terms or policies.
Send you marketing and promotional communications about our products and services, such as to market to you or provide you with information and updates on our products or services we think that you may be interested in (see Section 6 for information about how to manage your communication preferences at any time).
Measure, analyze, and improve the Services, including monitoring usage trends and diagnosing problems, and to develop new features.
Advertise and market the Services, including through advertising and analytics partners, as described in Section 5.
Detect, investigate, prevent, and address security incidents, fraud, and other malicious, deceptive, or illegal activity, and to protect the rights, property, and safety of the Company, our customers, and others.
Comply with applicable law, legal process, and our contractual and legal obligations, and to establish, exercise, or defend legal claims.
Create de-identified or aggregated information that cannot reasonably be used to identify you, which we may use and disclose for any lawful purpose. Where we create de-identified information, we maintain it in de-identified form and do not attempt to reidentify it except as permitted by law.
For any other lawful purpose, or other purpose described to you at the time the information was collected or to which you consent.

Categories of Personal Information We Collect, Disclose, and Share

The table below describes the categories of personal information we have collected within the last twelve (12) months, and whether we may “share” each category with advertising or analytics partners as that term is defined by California law. We do not sell personal information for money.

Category	Examples of what we collect	Shared for advertising or analytics?
Identifiers – name and contact information	Customer name and email address	No
Identifiers – online identifiers	IP address, device and session identifiers	Yes, may be shared with advertising and analytics partners
Customer records	Name, contact information, and billing and payment records	No
Commercial information	Subscription and transaction history; proposals, bids, and project records	No
Internet or other electronic network activity	Pages and features viewed, clicks, access times, referring pages, and similar usage data	Yes, may be shared with advertising and analytics partners
Geolocation data	Approximate location (such as city or region)	No
Sensitive personal information	Account log-in credentials (username and password), used only to authenticate you and secure your account	No

Cookies, Analytics, and Advertising

We and our partners use cookies and similar tracking technologies (such as pixels, tags, and web beacons) to operate the Website, understand how it is used, and market our Services. Cookies are small data files stored on your device. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that we may use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness.

5.1 Types of Technologies We Use

Strictly necessary and functional. These keep you logged in, maintain your session, and support core Website functionality. The Services cannot operate properly without them.
Analytics. We use a third-party product-analytics provider to understand how visitors and users interact with the Website and the Services, which features are used, and where we can improve.
Advertising and marketing. We use advertising and marketing technologies that allow us and our partners to deliver advertisements for our Services to you on other websites and applications and to measure the effectiveness of those campaigns. This is sometimes called targeted, interest-based, or cross-context behavioral advertising.

5.2 “Selling” and “Sharing” Under State Law

We do not sell personal information for money. However, we may disclose certain online identifiers and activity information to advertising and analytics partners, and those partners may use that information for their own purposes and to deliver targeted advertising across other websites or applications.

5.3 Your Cookie and Advertising Choices

Cookie preference tool. You can accept or decline non-essential cookies, and change your choices at any time, using our cookie preference center on our Website.
Opt-out preference signals. We recognize and honor the Global Privacy Control (GPC) or other browser- or device-based universal opt-out preference signals. If you enable such a signal, we will treat it as a request to opt out of the sale or sharing of personal information and of targeted advertising for that browser or device.
Browser controls. Most browsers let you refuse or delete cookies, or notify you when a cookie is set. Disabling cookies may affect how the Website functions.
Industry opt-outs. You can learn about interest-based advertising and opt out of participating companies at www.aboutads.info/choices and optout.networkadvertising.org.

5.4 Do Not Track and Third-Party Collection

Some browsers offer a “Do Not Track” (DNT) setting. There is no common industry standard for interpreting DNT signals, and we do not respond to them. We do honor Global Privacy Control signals as described above. Third parties, including our analytics and advertising partners, may collect personal information about your online activities over time and across different websites when you use the Website.

5.5 Web browser cookies

Our Sites may use “cookies” to enhance the User experience. User’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. Users may choose to set their web browser to refuse cookies or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

Cookie Preferences

Your Choices

Marketing emails. You may opt out of marketing and promotional emails at any time by clicking the “unsubscribe” link in any such email or by contacting us at the address in Section 13. Even if you opt out, we will continue to send you administrative, transactional, and service-related messages about your account.
Account information. You may review, update, and correct certain account information by logging in to your account. You may also contact us at the address in Section 13 to request changes.
Closing your account. You may request that we close and delete your account by contacting us. We may retain certain information as described in Section 9 or as required by law.
Cookies and advertising. See Section 5.

How We May Disclose Personal Information

We may disclose your personal information in the instances described below. For further information on your choices regarding your information, see Section 6.

Service providers and vendors. We may disclose personal information to companies that perform services on our behalf and are contractually restricted from using it for their own purposes. These include providers of cloud hosting and infrastructure, database and data storage, website security and content delivery, user authentication and log-in management, email delivery, product analytics, mapping and location functionality, and payment processing.
Advertising and analytics partners. As described in Section 5, we may disclose certain online identifiers and activity information to advertising and analytics partners, which may use it for their own purposes.
Our business customers. If you use the Services through an account established by a business customer (for example, your employer), we may disclose information about your use of the Services to that business customer, which administers the account.
Corporate transactions. We may disclose or transfer personal information in connection with, or during negotiations of, any merger, acquisition, financing, reorganization, sale of company assets, bankruptcy, or similar transaction or proceeding. We will use reasonable efforts to ensure that transferred information is treated in a manner consistent with this Policy.
Legal and safety. We may disclose personal information if we believe disclosure is required by or consistent with applicable law, regulation, legal process, or governmental request; to enforce our agreements, terms, and policies; or to protect the rights, property, or safety of the Company, our customers, or others.
Professional advisors. We may disclose personal information to our lawyers, accountants, insurers, bankers, and other professional advisors where necessary to obtain advice or manage our business.
With your direction or consent. We may disclose personal information to other parties at your direction or with your consent.
Aggregated or de-identified information. We may disclose information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

Your Privacy Rights

Depending on where you live, you may have some or all of the rights described below with respect to your personal information. These rights are not absolute and are subject to exceptions under applicable law. We provide these rights to residents of each U.S. state that grants them.

Right to know or access. To request confirmation of whether we process your personal information and to obtain a copy, along with information about the categories collected, the sources, the purposes, and the categories of third parties to which we may disclose it.
Right to delete. To request that we delete personal information we have collected from you.
Right to correct. To request that we correct inaccurate personal information we maintain about you.
Right to data portability. To obtain a copy of certain personal information in a portable and, where technically feasible, readily usable format.
Right to opt out of sale, sharing, and targeted advertising. To direct us not to sell or share your personal information or to use it for targeted advertising, as described in Sections 5 and 8.1.
Right to non-discrimination. We will not discriminate against you for exercising any of these rights. We will not deny you Services, charge you different prices, or provide a different level or quality of Services because you exercised a privacy right.

8.1 How to Exercise Your Rights

You may submit a request by emailing us at [email protected].

We will ask you to provide information that allows us to reasonably verify that you are the person about whom we collected personal information. If you choose to contact us, you will need to provide us with:

Enough information to identify you;
Proof of your identity, ordinarily, confirmation that you control the email address associated with your account; and
A description of what right you want to exercise, and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

We will respond to your request within the time period required by applicable law, and we may extend that period where permitted by providing you notice.

8.2 Appeals

If we decline to act on your request, you may appeal our decision by emailing us at [email protected] within a reasonable period after receiving our decision. We will review the appeal and inform you in writing of our decision and the reasons for it within the period required by applicable law.

How Long We Keep Personal Information

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. In determining how long to retain information, we consider:

the length of time we have an ongoing relationship with you and provide the Services to you;
whether there is a legal, tax, accounting, or regulatory obligation that requires retention;
whether retention is advisable in light of our legal position, such as for statutes of limitations, litigation, or regulatory investigations; and
whether the information is necessary to protect the security and integrity of the Services or to prevent fraud or abuse.

In general, we retain account and service content for as long as your account is active and for a reasonable period afterward, typically 90 days, after which we delete or de-identify it.

Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately at [email protected] if you believe your account has been compromised.

10.1 Website security and bot protection

We use Cloudflare Turnstile on our Website. Turnstile is a pro-privacy bot detection service provided by Cloudflare, Inc. It helps us protect our Website from malicious activity, spam, and automated bot attacks.

To function, Turnstile processes certain technical “signals” from your browser and device, such as your IP address, browser configuration, and device fingerprints. This information is used solely to distinguish human users from bots and is not used for profiling or advertising purposes. BidCopilot, LLC acts as the data controller for this security processing, while Cloudflare acts as our service provider. You can learn more about how this data is handled by visiting the Cloudflare Turnstile Privacy Policy.

Children’s Privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us personal information, please contact us at [email protected].

Changes to This Policy

We may update this Policy from time to time. If we make changes, we will revise the “Last Updated” date at the top of this Policy and post the updated Policy on the Website, and in some instances, we may provide additional, secondary notice to you. We encourage you to review this Policy periodically.

How to Contact Us

If you have questions about this Policy or our privacy practices, or if you wish to exercise a privacy right, please contact us at:

BidCopilot, LLC
Email: [email protected]
Phone: 888-243-1669

Contents