Privacy policy

The short version

Your proposals, clients, and pricing live in a database on your computer. If you sign in, copies sync to our servers as a backup and to power hosted links and teams. You can export everything, or delete your server copy, at any time from Settings — no support ticket required.

What stays on your device

• All proposal content, client records, service catalogs, and business profiles, stored in a local SQLite database.
• Email credentials. SMTP passwords and OAuth tokens are kept in your operating system's keychain, encrypted at rest — never in our database and never synced.
• Your Anthropic API key, if you use AI assist. It is stored locally and sent only to Anthropic when you invoke the feature.

What syncs to our servers, and why

When you sign in, Bidas syncs your records to api.bidas.app every few minutes. This powers cloud backup, multi-device access, team workspaces, and hosted proposal links. Synced data includes business profiles, clients, service catalogs, and proposals. Deleted records sync as tombstones so deletions propagate across your devices.

Hosted links & e-signatures

When you send a hosted link, the proposal is published at a private URL on bidas.app. We record when the link is opened (to show you the Viewed status). When a client signs, we record their typed name, drawn signature, timestamp, IP address, and browser user agent — together these form the legal audit trail for the acceptance, and they are part of the proposal record you own.

Your account

You create an account with your email address and a password (at least 8 characters), then confirm the email with a 6-digit code. Passwords are stored only as a salted bcrypt hash — never in plain text, and never synced to your devices. We use your email to run the service — verification, license delivery and restore, and support replies — not for advertising.

What we don't do

• We don't sell or rent your data, or your clients' data, to anyone.
• We don't read proposal content for advertising or profiling.
• This website does not use advertising trackers.

Your controls

• Export everything: Settings includes a complete JSON export of your account data.
• Delete server copy: removes your synced data from our servers. Local data on your devices is untouched; sync stops.
• Account deletion: in the iPhone app, open Settings → Account and use "Delete my account". It asks for your password, then removes your account and everything on it — proposals, clients, services, and any hosted links you have sent. Those links stop working immediately. This cannot be undone. You can also email us from your account address and we will do the same thing.

Data retention

We retain synced records while your account is active. Signature audit trails are retained as part of the proposal record for as long as the proposal exists, since they constitute the legal evidence of acceptance. When you delete your server copy or your account, remaining data is purged from active systems and expires from backups on their normal rotation.

The iPhone app

Bidas for iPhone signs in to the same account and syncs the same records as the desktop app. What it holds on the phone is a copy of your account: signing out clears that copy, and nothing synced is lost.

• Face ID: optional, and used only to unlock the app on that device. Face and fingerprint data never leaves your phone — iOS answers Bidas with yes or no, and we never see, receive, or store anything biometric.
• Photos: access is requested only when you choose a logo or a signature image, and only the image you pick is read. Bidas does not browse your library and takes nothing else from it.
• Crash reports: if the app crashes, a report is sent to Sentry, our error-tracking provider, so the fault can be found and fixed. It carries the technical detail of the crash and a device identifier. It is deliberately configured not to attach your email address or IP address, and the app does not record your screen.
• No tracking: the app contains no advertising SDK, no analytics SDK, and no attribution SDK. Nothing about you is shared with data brokers or used to track you across other companies' apps or websites.

Connecting your Google or Microsoft email

Connecting your email is optional. If you choose to connect a Google (Gmail) or Microsoft (Outlook) account, Bidas requests access to send mail on your behalf and to read recent messages so it can match client replies to the proposals you sent. We use OAuth: Bidas receives access and refresh tokens, never your password. Those tokens are stored encrypted on your own computer and are used only to send your proposals from your address and to display replies to you inside the app.

We do not read, copy, store on our servers, transfer, sell, or use your mailbox contents for advertising, profiling, training generalized AI/ML models, or any purpose other than providing and improving these email features at your direction. Human access to this data occurs only with your explicit consent (for example, if you ask support for help), to comply with law, or as needed for security. You can disconnect at any time in Settings, or revoke access from your Google account / Microsoft account.

Bidas's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Privacy questions, export requests, or deletion help: [email protected].