Privacy Policy

1. Introduction

Gigabid LLC (“Gigabid,” “we,” “us,” or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Gigabid platform (“Platform”).

2. Information We Collect

2.1 Information You Provide

Account Information: Company name, work email address, business phone number, Employer Identification Number (EIN) for contractors, and account credentials.
Company Profile: Company details, certifications, insurance information, bonding capacity, service areas, and other professional qualifications you choose to share.
RFP and Bid Data: Project specifications, unit price sheets, bid submissions, and related project documents that you upload or enter.
Communications: Messages, questions, and answers exchanged through the Platform’s Q&A feature.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, timestamps of actions, and interaction patterns.
Device Information: Browser type, operating system, IP address, and general location (city/region level).
Cookies: Session cookies for authentication, and functional cookies for Platform operation. We do not use third-party advertising cookies.

3. How We Use Your Information

We use collected information to:

Provide, operate, and maintain the Platform
Process registrations and manage user accounts
Facilitate RFP publication, bid submission, and NDA execution
Send transactional emails (verification, bid notifications, Q&A alerts)
Enforce our Terms & Conditions and prevent fraud
Improve the Platform’s features and user experience
Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We share your information only in the following circumstances:

Between Platform Users: ISPs see contractor company names, bids, and qualifications when contractors engage with their RFPs. Contractors see ISP company names and RFP details after signing NDAs. Public Q&A answers are visible to all NDA-signed contractors (questions are anonymized).
Service Providers: We use third-party services to operate the Platform, including Supabase (database and authentication), Resend (transactional email), and Mapbox (mapping services). These providers process data solely on our behalf under contractual obligations.
Legal Requirements: We may disclose information if required by law, subpoena, court order, or government regulation, or to protect our rights, property, or safety.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure password hashing, row-level security policies in our database, and rate limiting on sensitive operations. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Platform’s services. Upon account termination, we retain data for a period of ninety (90) days to support any pending transactions or disputes, after which it may be deleted. Certain data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Object to or restrict processing of your data
Request data portability

To exercise any of these rights, please contact us at privacy@gigabid.com. We will respond to your request within thirty (30) days.

8. Cookies

The Platform uses essential cookies for authentication and session management. These cookies are necessary for the Platform to function and cannot be disabled. We do not use advertising or tracking cookies. No third-party analytics services are embedded in the Platform that track individual users across websites.

9. Children’s Privacy

The Platform is intended for use by businesses and individuals who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least thirty (30) days before the effective date through email notification or prominent notice on the Platform. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related questions or concerns, please contact:
Gigabid LLC
Email: privacy@gigabid.com