Privacy
Privacy policy
BidYard's core data — contract solicitations and grant awards — comes from public federal sources (SAM.gov, USAspending.gov, Grants.gov) and isn't personal information. This policy covers what we collect about you as a visitor, access applicant, or subscriber.
What we collect
- Pilot inquiries (the /start form): the name, email, company, and message you submit. This is emailed directly to us and is not stored in a database.
- Subscriber accounts: name, email, and company for each seat we provision, plus a hashed password (we never store your password in plain text). Used only to sign you in and to send the notice digest you're subscribed to.
- Session cookies: a signed, HttpOnly cookie that keeps you signed in to the admin or subscriber dashboard. It carries no personal data beyond an expiry and signature.
- Payment: handled entirely by Stripe. We never see or store your card details.
What we don't do
We don't run analytics or advertising trackers on this site, don't sell or share your information with third parties for marketing, and don't use your data for anything beyond running the product and responding to you.
Third parties we use
Supabase (database hosting), an SMTP provider (sending the access inquiry and notice-digest emails), Vercel (hosting), and Stripe (payment). Each processes only what's necessary to provide their part of the service.
Your data, your control
Contact us to have your subscriber account and any stored data deleted, or to ask what we hold about you.