BidlyzeSign In

Privacy Policy

Last updated: April 4, 2026

1. Introduction

Bidlyze ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use our platform at bidlyze.com.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Authentication credentials (managed securely by our authentication service provider — we never see or store your password directly)

2.2 Documents You Upload

When you use Bidlyze to analyze RFx and tender documents, you upload files (PDF, DOCX, or TXT). The text content of these documents is sent to a third-party AI service via API to generate your analysis. We store your analysis results in your account so you can access them later.

2.3 Usage Data

Our hosting infrastructure automatically collects standard server logs when you use the Service, which may include:

  • IP address
  • Browser type and version
  • Pages requested and response times
  • Time and date of requests
  • Referring URL

We do not currently use any third-party analytics or tracking services beyond standard server logs. If we add analytics tools in the future, we will update this policy.

2.4 Payment Information

Payments are processed by our authorized merchant of record, Paddle (Paddle.com Market Limited). We do not store your credit card number, CVV, or bank account details on our servers. Paddle handles all payment data in accordance with PCI DSS standards. We receive only a transaction reference, plan type, and billing status from Paddle.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Bidlyze platform
  • Process your document analyses and deliver results
  • Manage your account and subscription
  • Process payments through Paddle
  • Send transactional emails (account verification, analysis summaries, usage notifications, and important service updates)
  • Monitor usage to enforce plan limits and detect abuse
  • Comply with legal obligations

We do not use your uploaded documents or analysis data to train AI models. Your document content is sent to our AI provider solely to generate your analysis results, then is not retained by the AI provider beyond what is needed to process the request.

4. Cookies & Local Storage

Bidlyze uses only essential cookies required for authentication and session management. These are set by our authentication service and are necessary for the platform to function. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

We also use browser local storage to save your theme preference (light/dark mode). This data stays on your device and is not transmitted to our servers.

5. Third-Party Services

To operate the Service, we work with trusted third-party providers in the following categories:

  • Authentication & data storage — We use a third-party service to manage user accounts, secure authentication, and store your account data and analysis results.
  • AI & document processing — We use third-party AI services to analyze uploaded document content and generate structured outputs for you. These providers process data only to the extent necessary to deliver the requested analysis, subject to their own privacy and data processing terms.
  • Paddle — Paddle (Paddle.com Market Limited) acts as our merchant of record for payment processing and subscription management. Paddle handles all billing, invoicing, and tax-related processing on our behalf.
  • Hosting & infrastructure — We use a third-party cloud platform to host the Bidlyze application, serve web requests, and maintain standard server logs.
  • Email delivery — We use a third-party provider to deliver transactional emails, including account notifications and analysis summaries.

Each provider operates under its own privacy policy and terms of service. We share data with third parties only to the extent necessary to provide the Service to you. We may use additional service providers and subprocessors to support the operation of the Service. Information about relevant subprocessors may be provided upon reasonable request by contacting support@bidlyze.com.

6. International Data Processing

Bidlyze is operated from and our primary infrastructure is hosted in the United States. Our third-party service providers may process data in the United States and other countries. By using the Service, you acknowledge that your data may be transferred to and processed in jurisdictions outside your country of residence, which may have different data protection laws than your jurisdiction.

7. Data Storage & Security

We take reasonable steps to protect your personal data. The security measures currently in place include:

  • All data transmitted between your browser and our servers is encrypted via TLS (HTTPS)
  • Authentication is managed by a dedicated service provider that handles password hashing and session tokens
  • Database access is restricted using row-level security policies, ensuring users can only access their own data
  • API endpoints verify user authentication before processing requests
  • We do not store payment credentials — all payment data is handled by Paddle

Our infrastructure providers maintain their own security certifications and encrypt data at rest on their platforms. While we rely on these providers' security measures and take care in our own application design, no system is 100% secure. We cannot guarantee absolute security and will notify affected users promptly if a data breach occurs.

8. Data Retention

We retain your account data and analysis results for as long as your account is active. Retention periods vary by plan:

  • Free plan: Analysis history is accessible for 30 days from creation.
  • Paid plans: Analysis history is retained for as long as your subscription is active.

If you wish to delete your account and associated data, please contact us at support@bidlyze.com. We will process deletion requests within 30 days, except where we are required to retain certain data for legal or regulatory purposes (such as billing records).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data ("right to be forgotten")
  • Export your data in a commonly used format
  • Withdraw consent for data processing where consent is the legal basis
  • Object to processing of your personal data

To exercise any of these rights, please email support@bidlyze.com with the subject line "Privacy Request." We will respond within 30 days. Note that some requests are handled manually at this stage, so please allow reasonable time for processing.

10. Children's Privacy

Bidlyze is a business tool designed for professionals. It is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

If you have any questions about this Privacy Policy or your personal data, please contact us: