Privacy Policy

Information You Provide:

• Account Information: To use our services, you are required to create an account. This involves providing basic information such as your name, email address, and company details.
• Payment Information: If you opt for a paid service, we will process payment information through secure third-party services.
• Customer Data: When you use our platform, you may upload documents, proposal content, project information, and other materials ("Customer Data") to be used with our AI-powered tools.
• Collaborator Information: When a customer requests information from a collaborator or subconsultant through Bidaya, we receive that person's name, work email, and firm from the customer, along with the answers and files they submit. We use this only to deliver the request and its reminders and to make the response available to the customer.

Automated Information:

• Usage Data: We collect information about your interactions with our services, including IP addresses, device types, and browsing patterns, to enhance and personalize your experience.
• Cookies and Analytics: We use cookies and similar technologies to understand how visitors interact with our website and to improve the Service. This may include third-party analytics tools and, for signed-in users, session recordings with form inputs masked, which we use to diagnose problems.

We use the collected information for the following purposes:

• Service Provision: To deliver and maintain our platform, including proposal development, opportunity discovery, knowledge management, and related services.
• Improvement and Personalization: To analyze aggregated, anonymized usage patterns and enhance the functionality and user experience of our services. This analysis does not involve training AI models on Customer Data.
• Communication: To send you updates, newsletters, and other communications related to our services, with your consent.

We recognize the sensitivity of the data used in the proposal process. Our use of Artificial Intelligence is governed by the following principles:

• No Model Training: Bidaya does not use your Customer Data to train, fine-tune, or improve the foundational Large Language Models (LLMs) used by our system. Your data remains yours and is not used to benefit other customers.
• Zero Retention by AI Providers: We utilize third-party API integrations to process your data. These providers are contractually prohibited from using your data for model training. Data sent to these providers is transient (ephemeral). It is processed solely to generate a response and is not retained by the AI provider for training purposes.
• Data Isolation: When we index your content (e.g., for retrieval and context), it is stored in a logically isolated environment. Your Customer Data is never accessible to other Bidaya customers.

We do not sell your personal data. We may share your information with trusted third-party service providers ("Subprocessors") solely for the purpose of delivering the Service. We enter into Data Processing Agreements with these providers where applicable, ensuring that they protect your data and process it only according to our instructions. These third parties are obligated to maintain the confidentiality of your information and are prohibited from using it for any other purpose.

A current list of Subprocessors is available upon request.

We implement robust security measures to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure. Data is encrypted in transit and at rest. Access to your data is strictly limited to team members who require it for operational purposes.

Your data is stored securely on cloud infrastructure located in North America. We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Upon termination of your subscription, Customer Data is handled in accordance with the data portability and deletion provisions set out in our Terms of Service.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of any inaccuracies in your data.
• Request deletion of your data, subject to certain exceptions.
• Object to or restrict the processing of your data.

To exercise these rights, please contact us at [email protected].

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service with reasonable advance notice. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Our Privacy Officer is responsible for this Privacy Policy and for how we handle personal information. For questions, concerns, or requests about your data, contact:

Majd Alsado, Privacy Officer
Bidaya Technologies Inc.
[email protected]