Your company data stays tied to the work you request.
This notice explains what Bid Factory stores, why it is used, and the controls available to customers. Last updated August 19, 2026.
What we collect
We collect company profile and contact details, the solicitation sources and requirements you provide, company evidence used to build a response, usage and traffic attribution, and limited Stripe references such as customer, checkout, subscription, invoice, and event identifiers. Bid Factory does not store full payment card numbers.
How we use it
We use the data to deliver fit reports, provision paid access, create source-linked decision packs and drafts, operate customer support, prevent unauthorized access, honor refunds, cancellations, and unsubscribes, and reconcile revenue and operating controls.
Service providers
Stripe processes checkout and subscription billing. OpenAI Sites provides the hosted application and sign-in boundary, with Cloudflare infrastructure used for application delivery and structured storage. These providers receive only the data needed to perform their services under their own terms.
Sharing and selling
Bid Factory does not sell customer personal information. Data may be disclosed when required by law, to protect the service, or to the service providers needed to operate it. Customer proposal materials are not published as opportunity pages.
Retention and control
Records are retained while needed to deliver the service, maintain the signed payment and approval audit trail, resolve disputes, and meet legal or accounting obligations. Use the support page to request access, correction, or deletion. Some payment and audit records may need to be retained after a deletion request.
Security boundary
Paid work is gated by ChatGPT sign-in and matched server-side to the email Stripe verified at checkout. No system can guarantee absolute security; do not upload classified information, controlled unclassified information, payment card data, passwords, or information you are not authorized to share.
Contact
Submit a privacy or data request through the support form. The request enters the same owner-audited queue used for customer operations.