Privacy policy
Effective date: September 1, 2026 · Last updated: September 17, 2026
This policy explains what information WinMyBids collects when you use winmybids.com and the Bid Intelligence Report service, how we use it, who we share it with, and the choices you have. WinMyBids is offered to businesses in the United States. This policy is written to be read. If anything is unclear, write to hello@winmybids.com.
1.Information we collect
Documents you upload
The solicitation files you upload, the text and page images extracted from them, and the findings generated from them. These may incidentally contain personal information about buyer contacts or your own staff.
Account and payment information
Your email address, collected when you sign in or by Stripe at checkout. Stripe collects payment card details directly; we never see card numbers. From Stripe we keep the payment confirmation, the amount and any tax, the email used at checkout, and a Stripe customer ID.
Usage and technical information
A keyed hash of your IP address (we never store the raw address), browser type, the pages and actions you request, and error logs. We do not run analytics or advertising trackers.
2.How we use it
- To process your documents and produce the preview and report you asked for.
- To send transactional email: a notice when a paid report is ready, sign-in codes and links, and payment receipts. We do not send marketing email.
- To operate, secure, and debug the Service, including a daily limit on free previews per connection.
- To fix problems and improve the Service.
- To respond to your questions and support requests.
We do not use your documents or findings to train machine-learning models, and we do not sell personal information.
3.AI processing
To produce the report, the text extracted from your documents and page images of any scanned pages are sent to Anthropic’s Claude API, along with, for Bid Pricing, the scope facts and the rates you enter. This happens under commercial terms that do not permit Anthropic to train on the content. Anthropic may retain inputs and outputs for a limited period for abuse monitoring. Document text is passed to the model as data to be analyzed, never as instructions, and the report is generated by software rather than reviewed by a person.
4.Who we share it with
We share information only with the service providers listed on the security page (Supabase, Anthropic, Stripe, Resend, Vercel, Railway), each bound by terms that restrict use of your data to providing their service to us.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. Because we do not sell or share, a Global Privacy Control signal from your browser changes nothing about how we handle your information.
We may also disclose information if required by law or legal process, to protect the rights and safety of our users or the public, or as part of a merger or acquisition, in which case this policy will continue to apply to the transferred data.
5.How long we keep it
- Uploaded documents: removed automatically 90 days after upload, together with the files derived from them. You can delete them sooner from the dashboard.
- Reports and findings: until you delete the package.
- Account and payment records: for as long as your account exists, and afterwards as required for tax and accounting purposes.
- Logs: up to 30 days.
6.Your choices and rights
You can:
- Delete any package, including its documents and report, from the dashboard at any time.
- Ask what personal information we hold about you and receive a copy of it.
- Ask us to correct inaccurate information.
- Ask us to delete your personal information, subject to the retention periods above.
- Close your account by emailing us.
To make a request, email hello@winmybids.com from the address on your account so we can confirm it is you. An authorized agent may make a request on your behalf with your written permission. We respond within 45 days; if we need longer, we will tell you why and when to expect an answer. If we decline a request, we will explain why, and you can appeal by replying to that email. We will not treat you differently for making a request.
We send only the email needed to provide the Service (report-ready notices, sign-in codes and links, and receipts). There is no marketing email to opt out of.
7.Cookies
We use only strictly necessary cookies: the cookies that keep you signed in, and a cookie named winmybids_claim, which lasts 90 days and ties a package you uploaded to your browser before you have an account. We do not use analytics, advertising cookies, or third-party tracking pixels, so there is no cookie banner.
8.Security
Documents are stored in private, encrypted storage in the United States. Files are served only through signed links that expire within 10 minutes and are issued only after our server confirms that you own the package. Row-level security on every database table is a second layer. The full description is on the security page. No system is perfectly secure, and we do not currently hold SOC 2 or FedRAMP certification.
If we confirm a security breach affecting your data, we will notify you by email without undue delay.
9.Children
The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
10.Where we operate
WinMyBids is operated from the United States and is offered to businesses in the United States. Information is stored and processed in the United States.
11.Changes to this policy
When we change this policy, we will post the new version here with a new date and, for material changes, notify account holders by email.
12.Contact
Privacy questions and requests: hello@winmybids.com.