Bidas

Privacy

Privacy policy

Last updated: July 2026

Bidas is local-first software: your work lives on your machine, and we hold as little of your data as the product can function with. This page explains exactly what leaves your computer, why, and how to take it back.

The short version

Your proposals, clients, and pricing live in a database on your computer. If you sign in, copies sync to our servers as a backup and to power hosted links and teams. You can export everything, or delete your server copy, at any time from Settings — no support ticket required.

What stays on your device

  • All proposal content, client records, service catalogs, and business profiles, stored in a local SQLite database.
  • Email credentials. SMTP passwords and OAuth tokens are kept in your operating system's keychain, encrypted at rest — never in our database and never synced.
  • Your Anthropic API key, if you use AI assist. It is stored locally and sent only to Anthropic when you invoke the feature.

What syncs to our servers, and why

When you sign in, Bidas syncs your records to api.bidas.app every few minutes. This powers cloud backup, multi-device access, team workspaces, and hosted proposal links. Synced data includes business profiles, clients, service catalogs, and proposals. Deleted records sync as tombstones so deletions propagate across your devices.

Hosted links & e-signatures

When you send a hosted link, the proposal is published at a private URL on bidas.app. We record when the link is opened (to show you the Viewed status). When a client signs, we record their typed name, drawn signature, timestamp, IP address, and browser user agent — together these form the legal audit trail for the acceptance, and they are part of the proposal record you own.

Your account

Accounts are identified by email address and verified with 6-digit codes; we do not store account passwords. We use your email to run the service — verification, license delivery and restore, and support replies — not for advertising.

What we don't do

  • We don't sell or rent your data, or your clients' data, to anyone.
  • We don't read proposal content for advertising or profiling.
  • This website does not use advertising trackers.

Your controls

  • Export everything: Settings includes a complete JSON export of your account data.
  • Delete server copy: removes your synced data from our servers. Local data on your devices is untouched; sync stops.
  • Account deletion: email us from your account address and we'll close it and purge remaining server data.

Data retention

We retain synced records while your account is active. Signature audit trails are retained as part of the proposal record for as long as the proposal exists, since they constitute the legal evidence of acceptance. When you delete your server copy or your account, remaining data is purged from active systems and expires from backups on their normal rotation.

Contact

Privacy questions, export requests, or deletion help: [email protected].