BidMyCommunity Privacy Policy

Effective date: July 28, 2026

Last updated: July 28, 2026

BidMyCommunity, Inc. ("BidMyCommunity," "we," "us," or "our") provides an online marketplace that connects community associations and their managers ("Community Users") with licensed contractors and service providers ("Contractors") for community projects, bidding, scheduling, and payments.

This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to:

• our website at https://bidmycommunity.com;
• our iOS mobile app (distributed through the Apple App Store); and
• our Android mobile app (distributed through Google Play)

(together, the "Services"). By creating an account or using the Services, you agree to this Privacy Policy.

1. Who we are and how to reach us

BidMyCommunity, Inc. is a Delaware corporation headquartered in Palm Beach, Florida, USA.

• Privacy, data, and account-deletion requests: support@bidmycommunity.com
• Website: https://bidmycommunity.com

If you have questions about this policy or want to exercise your privacy rights (including deleting your account and data), contact us at the email above.

2. The information we collect — at a glance

We do not collect government ID numbers, Social Security numbers, precise GPS location, health data, or information from children (see Section 11). We do not use your data for third-party advertising, and we do not sell your personal information.

3. The information we collect — in detail

a. Information you provide when you create an account

• Identity & contact: name (title, first name, last name), email address, and phone number(s) (mobile, office).
• Password: stored only in hashed form — we never see or store your plaintext password.
• Account type & role: whether you are a Community User or a Contractor, and your role within a community or company.
• Profile details: job title, profile photo, and consent timestamps (when you accepted our Terms and compliance requirements).

b. Community and Contractor/company profiles

• Community information: community/property name, description, address, city, county, state, property type, number of units, year built, phone, email, website, logo, and verification documents.
• Contractor/company information: company name and "doing business as" name, description, business address, phone, email, website, year established, service categories, service areas, license information, references, and links to social and review profiles (e.g., Facebook, LinkedIn, Instagram, Google, BBB).
• Verification materials: documents, photos, licenses, and marketing materials you upload to verify a community or company.

c. Content you submit

• Projects & bids: project titles, descriptions, requirements, budgets, timelines, project contacts, and documents/RFPs; proposals/bids including pricing, qualifications, references, milestones, and attachments.
• Messages & attachments: messages you exchange with the other party during bidding or scheduling, and files or images you share.
• Appointments: requested times, contact details, and messages related to scheduling.
• Reviews & feedback: ratings, comments, and feedback (including feedback on our AI features).

d. Payment information (website only)

The mobile apps do not process payments. Any payments happen on our website and are handled by our third-party payment processor (Stripe). Stripe collects and processes card and banking details directly; we do not receive or store full card numbers or bank account numbers. We retain limited payment records such as amounts, status, the payer's name and email, invoice details, and Stripe transaction identifiers.

e. Calendar connections (optional)

If you connect a calendar for scheduling, we store the OAuth tokens needed to access your Google or Microsoft Outlook calendar for that purpose. These tokens are stored encrypted, and you can disconnect a calendar at any time.

f. Information collected automatically

• Device & usage data: IP address, browser/device (user-agent), and session information, used to keep you signed in and to operate and secure the Services.
• Diagnostics: if you submit an error report or the app encounters a problem, we may collect the page/URL, device/app info, and any description you provide to help us fix it.
• Activity logs: we keep an internal audit log of key actions (e.g., changes to projects, proposals, and contracts) for security, compliance, and dispute resolution.

4. Mobile app permissions and device data

Our iOS and Android apps may request the following permissions. Each is used only for the stated purpose, and you can grant or revoke them in your device settings:

• Camera — to take photos (e.g., of a project or verification materials) that you choose to upload.
• Photos / media / files — to let you select and upload images and documents.
• Notifications — to send you app notifications about your projects, bids, and appointments. If you enable notifications, your device provides a push token to the platform's push service — Apple Push Notification service (APNs) on iOS or Firebase Cloud Messaging (FCM) on Android — solely to deliver those alerts to your device.

We do not access your contacts, precise location, microphone, or health/fitness data, and we do not include third-party advertising or cross-app tracking SDKs in the apps.

5. How we use your information

We use the information above to:

• Create and manage your account and profiles;
• Operate the marketplace — post projects, submit and evaluate bids, form contracts, and schedule appointments;
• Facilitate communication between Community Users and Contractors;
• Verify communities and companies and maintain trust and safety;
• Process payments made on the website (via Stripe) and maintain related records;
• Send transactional and service notifications by email, in-app, and (if enabled) push (e.g., account confirmations, approvals, new-bid alerts, questions/replies, appointment reminders);
• Provide optional AI-assisted features (see Section 7);
• Secure the Services, prevent fraud and abuse, debug problems, and enforce our Terms;
• Comply with legal obligations and resolve disputes.

We rely on the following legal bases where applicable: performance of our contract with you (to provide the Services), your consent (e.g., optional calendar connection and notifications), our legitimate interests (security, fraud prevention, improving the Services), and compliance with legal obligations.

6. How and with whom we share information

Between users (core to the marketplace). To operate the marketplace, certain information is shared between the parties to a project:

• When a Contractor submits a bid, the Contractor's company profile, qualifications, references, and any contact details in the bid become visible to the relevant Community User.
• When a Community User posts a project, the project details and the designated project contact information become visible to Contractors who can bid.
• Scheduling an appointment shares the contractor's name, phone, email, and messages with the community, and vice-versa.

Please only include information you're comfortable sharing with the other party.

Service providers (processors). We share information with vendors who process it on our behalf and under contract, including:

• Stripe — payment processing (website payments);
• a third-party email delivery provider — to send transactional emails and notifications;
• Apple (APNs) and Google (Firebase Cloud Messaging) — to deliver mobile push notifications you've enabled;
• Amazon Web Services (S3) — encrypted cloud storage for uploaded files and documents;
• Anthropic — AI processing for optional bid-analysis features (see Section 7);
• Google (address entry, and Google Calendar if you connect it) and Microsoft (Outlook Calendar if you connect it);
• an encrypted, access-controlled cloud backup provider for database backups.

We also operate an internal customer-relationship tool used by our team to support you; project and community analytics may flow to it.

Legal & safety. We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is necessary to protect our rights, our users, or the public, or to investigate fraud or security issues.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information, we do not "share" it for cross-context behavioral advertising, and we do not use it for third-party advertising.

7. AI-assisted features

Some optional features use artificial intelligence to help Community Users review and compare bids — for example, extracting structured details from a proposal document or generating a side-by-side comparison of bids. To provide these features, the relevant proposal and project content (including uploaded bid documents) is sent to our AI provider, Anthropic, which processes it to return the analysis. We use this processing only to operate the feature you requested; the content is not used by us to train third-party models. We retain records of these requests and results to run the feature, control cost, and improve quality.

8. Cookies and similar technologies

On our website we use a session cookie to keep you signed in and an optional "remember me" token for persistent sign-in. We do not use third-party advertising or cross-site tracking cookies. Our mobile apps use standard on-device storage to keep you signed in; they do not use advertising identifiers. You can clear cookies in your browser settings and sign out at any time.

9. Data retention

We keep your information for as long as your account is active and as needed to provide the Services. We also retain certain records for longer where necessary to comply with legal, tax, accounting, and dispute-resolution obligations — for example, payment records, contract snapshots, and audit/activity logs. When information is no longer needed, we delete or de-identify it.

10. Your rights, choices, and account deletion

Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your personal information and account;
• Port a copy of certain information;
• Opt out of certain uses; and
• Be free from discrimination for exercising your rights.

California residents (CCPA/CPRA) and residents of other U.S. states with privacy laws may exercise the rights above and may use an authorized agent. We do not sell personal information or use it for cross-context behavioral advertising. We verify requests using your account information before acting on them.

Deleting your account and data

You can delete your account and associated personal information at any time by any of the following:

• In the mobile app: open your account settings and choose Delete Account;
• On the website: delete your account from your account settings; or
• By email: contact support@bidmycommunity.com and we will process your request.

When you delete your account, we delete or de-identify your personal information, except records we are required or permitted to retain (such as payment and contract records and audit logs). Note that content you shared with another party in a completed project (e.g., a contract) may be retained by that party and in our records for legal and dispute-resolution purposes.

Notifications and communications

Transactional messages (e.g., account, bid, and appointment notifications) are part of the Service. You can turn off push notifications in your device settings, and you can opt out of any non-essential email updates using the unsubscribe link.

To exercise any right, contact support@bidmycommunity.com.

11. Children's privacy

The Services are intended for businesses and adults (18+) and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. Security

We use technical and organizational safeguards to protect your information, including hashing of passwords, encryption of sensitive tokens, encrypted storage and backups, access controls, and transport encryption (HTTPS/TLS). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Where we operate and international users

BidMyCommunity is based in the United States, and the Services are operated for users in the United States. If you access the Services from outside the U.S., you understand and agree that your information will be processed in the United States, which may have different data-protection laws than your country.

14. Third-party links

The Services may contain links to third-party websites or services (for example, a contractor's website or a review site). We are not responsible for the privacy practices of those third parties, and this Policy does not apply to them. Please review their privacy policies.

15. Mobile app stores (Apple App Store & Google Play)

Our apps are distributed through the Apple App Store and Google Play, and your use of an app is also subject to that store's terms. Consistent with those stores' requirements:

• The apps do not process payments and contain no third-party advertising or tracking SDKs.
• We disclose the data we collect in the store listings' privacy/"Data safety" sections, consistent with this Policy.
• You can delete your account and data as described in Section 10 — in the app, on the website, or by emailing us.
• Push notifications are delivered through Apple (APNs) or Google (FCM) only to reach your device with alerts you've enabled.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Services or by email. Your continued use of the Services after an update means you accept the revised policy.

17. Governing law

This Privacy Policy is governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws principles.

18. Contact us

BidMyCommunity, Inc.

Palm Beach, Florida, USA

support@bidmycommunity.com