BidResponse AI

Privacy Policy

Effective Date: June 20, 2026

1. Introduction

UnfetteredMind LLC ("we," "us," or "our") operates BidResponse AI (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service. By using the Service, you agree to the practices described in this Policy.

2. Information We Collect

We collect the following types of information:

Account and Contact Information

When you create an account, we collect your name, email address, organization name, and billing information (processed by Stripe).

Uploaded Documents and Their Contents

You upload documents to the Service, including past proposals (knowledge base) and RFPs. We store these documents and their contents to provide the Service.

Usage Data

We collect information about how you use the Service, including access logs, feature usage, error reports, and performance data.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide the Service: Process your uploaded documents, extract questions from RFPs, generate draft answers grounded in your knowledge base, and present results with source citations and confidence scores.
  • Billing and Payments: Process subscription payments and manage your account through Stripe.
  • Support and Communication: Respond to your inquiries and provide customer support.
  • Security and Compliance: Maintain the security and integrity of the Service, prevent unauthorized access, and comply with legal obligations.
  • Service Improvement: Analyze usage patterns to improve the Service and develop new features.

4. Legal Basis and Purpose

We process your information based on the following legal grounds:

  • Contractual Necessity: Processing is necessary to perform our contract with you (to provide the Service you subscribed to).
  • Legitimate Interests: We have a legitimate interest in operating, securing, and improving the Service.
  • Legal Compliance: Processing may be necessary to comply with legal obligations.

5. Sharing with Subprocessors

We share your information with the following trusted third-party service providers (subprocessors) who assist us in operating the Service:

  • Supabase: Postgres database, file storage, and authentication services (US region).
  • Anthropic: Claude API for generating draft answers and extracting RFP questions.
  • OpenAI: Embeddings generation for knowledge base search and retrieval.
  • Stripe: Payment processing and subscription billing.
  • Vercel: Web hosting and serverless infrastructure.
  • Resend: Transactional email delivery.
  • Sentry: Error monitoring and performance tracking.

These subprocessors are contractually obligated to protect your information and use it only to provide services to us.

6. Your Documents Are Not Sold or Used for AI Training

We do NOT sell your documents or data to third parties.

Your uploaded documents and their contents are NOT used to train any AI model. We use AI services (Anthropic, OpenAI) to process your data and generate responses for you, but your data is not incorporated into their training datasets.

7. Data Storage Location and Security

Storage Location: Your data is stored in the United States using Supabase infrastructure.

Security Measures: We implement industry-standard security measures to protect your information, including:

  • Encryption in transit using HTTPS/TLS for all data transmitted to and from the Service.
  • Per-tenant data isolation using Postgres Row-Level Security (RLS) to ensure that each organization can only access its own data.
  • Secure authentication and access controls.
  • Regular security monitoring and error tracking through Sentry.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data Retention and Deletion

We retain your information for as long as your account is active or as necessary to provide the Service.

Upon termination of your subscription, we will delete your uploaded documents and associated data in accordance with our data retention policies, typically within 30 days. Some information may be retained longer if required by law or for legitimate business purposes (e.g., billing records, audit logs).

You may request deletion of your data at any time by contacting us at legal@bidresponseai.app.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: Request a copy of the information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your information, subject to legal and contractual obligations.
  • Export: Request a machine-readable copy of your data.
  • Objection: Object to processing of your information in certain circumstances.

To exercise any of these rights, please contact us at legal@bidresponseai.app.

10. Children's Privacy

The Service is a business-to-business (B2B) application and is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. The updated Policy will indicate the new effective date. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at legal@bidresponseai.app.