Privacy Policy
Last updated: May 1, 2026
1. Who we are
BidSafe is a software service operated by Xavier Bourgeois ("we," "us," or "our"), based in New Brunswick, Canada. We provide deterministic RFP document analysis to help contractors make bid/no-bid decisions. Contact: bidsafe26@gmail.com
2. What we collect
- ·Account information: email address, collected when you sign up via Clerk
- ·RFP documents: PDF files you upload for analysis. We do not store the original PDF. We store only the analysis result (recommendation, risk score, requirements, disqualifiers, key dates) in our database.
- ·Usage data: number of analyses run, hours saved, plan tier
- ·Payment information: handled entirely by Stripe. We never see or store your card number.
- ·Technical data: IP address, browser type, pages visited, collected via Vercel analytics
3. How we use your data
- ·To provide the RFP analysis service
- ·To maintain your analysis history and hours-saved total
- ·To process subscription payments via Stripe
- ·To send transactional emails (magic link sign-in) via Clerk
- ·To improve the service based on aggregate usage patterns
4. Data storage and residency
Your data is stored in a PostgreSQL database hosted by Neon on AWS infrastructure in the United States (us-east-1 region). We are a Canadian company. If Canadian data residency is a requirement for your organization, please contact us — Enterprise plans include Canadian data residency options.
5. Data sharing
We do not sell your data. We share data only with:
- ·Clerk (authentication provider) — your email address
- ·Stripe (payment processor) — your payment information
- ·Neon (database host) — your analysis data
- ·Vercel (hosting provider) — request logs
- ·The Railway platform — RFP analysis processing (document text is processed but not stored)
6. RFP document confidentiality
Uploaded PDFs are transmitted to our analysis engine over encrypted HTTPS connections and are not stored on disk. The analysis result JSON is stored in your account. We do not use your RFP documents to train models or share them with third parties.
7. Your rights
You may request deletion of your account and all associated data at any time by emailing bidsafe26@gmail.com. We will process deletion requests within 30 days. You may also export your analysis history from your dashboard.
8. Cookies
We use essential cookies for authentication (Clerk session tokens). We do not use advertising or tracking cookies.
9. Children
BidSafe is not directed at children under 13. We do not knowingly collect data from children.
10. Changes
We may update this policy. We will notify you by email of material changes. Continued use after notice constitutes acceptance.
11. Contact
Xavier Bourgeois — bidsafe26@gmail.com — New Brunswick, Canada