Privacy Policy

Effective date: July 17, 2026

This Privacy Policy explains how Brooklyn Rose Builders LLC, doing business as BidNexus ("BidNexus," "we," "us") collects, uses, and shares information when you use the BidNexus construction estimating platform at app.bidnexus.us and our website at bidnexus.us (together, the "Service").

1. Information We Collect

Account information. Name, email address, and password (passwords are handled by our authentication provider, Supabase, and are never visible to us in plain text). Organization name and membership if you use team features.

Billing information. Payments are processed by Stripe. We never receive or store your card number. We store your Stripe customer ID, plan/tier, and subscription status.

Project data you enter. Estimates, line items, pricing, proposals, scope descriptions, terms, schedules of values, change orders, notes, company logo, and project photos. This can include personal information about your own clients (names, addresses, contact details) that you choose to enter — see Section 4.

Usage analytics. We record first-party product events (for example: logins, project created/imported, PDF exported, checkout started, walkthrough completed) tied to your account, to understand feature usage and improve the product. We do not use third-party advertising trackers.

Technical data. Error reports (which may include your account identifier, app version, and error details), security reports (e.g., browser content-security-policy violation reports), and the technical logs our hosting providers generate (IP address, browser type, timestamps).

Local storage. The app stores your working project and session tokens in your browser's local storage so your work persists between visits and syncs when you're online.

2. How We Use Information

• Provide the Service: store, sync, and display your project data across your devices and (if applicable) your organization.
• Process subscriptions and payments, and manage plan tiers (including Founders-cohort pricing).
• Send transactional email (account confirmation-related messages, password resets, billing notices) via our email provider.
• Support you and troubleshoot problems.
• Improve the product through aggregate usage analytics.
• Protect the Service: detect abuse, enforce our Terms, and comply with law.

We do not sell your personal information, and we do not use your project data for advertising.

3. Photos and File Storage

Project photos and cover images are stored in our cloud file storage (Supabase Storage). Files are served via long, unguessable links so they can load in your projects and PDFs. These links are not published or indexed anywhere by us, but anyone who possesses a link can view that file — treat photo links you share the way you'd treat the photo itself. Deleted photos are removed from your projects; underlying files may be retained for recovery purposes.

4. Your Clients' Information

When you enter information about your own clients (names, addresses, project details, photos of their property), you are responsible for having the right to do so. We process that information solely to provide the Service to you, on your instructions — we don't contact your clients or use their information for our own purposes. If a person asks us to delete information about them that a contractor entered, we will refer the request to the contractor where appropriate and cooperate on deletion.

5. How We Share Information

We share information only with:

• Service providers (subprocessors): Supabase (database, authentication, file storage), Netlify (application hosting and serverless functions), Stripe (payments), and Zoho (transactional email). Each receives only what it needs to perform its function.
• Your organization: if you join or create a team, project data associated with the organization is visible to its members.
• Legal: if required by law, subpoena, or to protect the rights, safety, or property of BidNexus, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy's commitments.

6. Data Retention

Your project data is retained while your account is active so you don't lose work — including through plan downgrades and cancellations. Deleted projects are soft-deleted (recoverable) before permanent removal. You may request permanent deletion of your account and associated data at admin@bidnexus.us; we will honor requests within a commercially reasonable period, subject to legal obligations and backup copies that expire on a schedule.

7. Security

We use encryption in transit (HTTPS), authenticated access with row-level security on our database, and least-privilege access controls. Payment credentials are handled entirely by Stripe. No system is perfectly secure; we cannot guarantee absolute security, but we will notify affected users of a breach as required by law.

8. Your Rights and Choices

• Access / export: you can export your project data from within the app at any time.
• Correction: you can edit your account and project data directly in the app.
• Deletion: email admin@bidnexus.us to request account and data deletion.
• Email: transactional emails (password resets, billing) are necessary to the Service; any future marketing email will include an unsubscribe link.

California residents: you have rights under the CCPA/CPRA to know, delete, and correct personal information, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the CPRA. To exercise rights, email admin@bidnexus.us.

9. Cookies and Local Storage

The app uses browser local storage for your session and working project — this is essential to how the tool functions and is not used to track you across other sites. The marketing site currently sets no third-party advertising cookies.

10. Children

The Service is for business use by adults 18 and older. It is not directed at children, and we do not knowingly collect information from children under 13 (or under 16 for CPRA purposes). If you believe a child has provided us information, contact us and we will delete it.

11. Users Outside the United States

The Service is operated from the United States and intended for U.S. users; your information is stored and processed in the United States.

12. Changes to This Policy

We may update this policy. For material changes we will give notice by email or in-app notice before the changes take effect. The current version will always be posted at bidnexus.us.

13. Contact

Brooklyn Rose Builders LLC (DBA BidNexus)

admin@bidnexus.us

Mailing address available on request at admin@bidnexus.us