Privacy Policy

Overview

ReadMyBid is a U.S. homeowner tool for reviewing residential roofing quotes. This policy describes the current MVP. It is not a claim of GDPR, CCPA, or other privacy-law compliance, and it does not create privacy rights beyond what applicable law already provides.

Related terms are in the Terms of Use. Questions: hello@readmybid.com.

No account

Homeowners do not create an account to use ReadMyBid. There is no homeowner login, profile, or saved-project system in this MVP. The operator has a separate, restricted administration login.

Information you may provide

You upload roofing quote files only if you choose to. Supported files are PDF, DOCX, JPG, PNG, or WEBP.

The comparison flow may also send an optional 5-digit property ZIP code with the analysis request. That ZIP is used only as written context for that comparison. The roof cost calculator can collect an optional ZIP in your browser; that calculator ZIP stays in the browser and is not used for v1 price calibration, and it is not sent to the analysis APIs.

Please remove unnecessary names, addresses, phone numbers, signatures, financial information, and other personal data from documents before you upload. Do not upload information you do not want processed.

If you send product feedback, ReadMyBid collects the feedback category, message, page path, and an email address only if you choose to provide one for a reply. Do not paste quote contents or other personal information into the feedback message.

How quote files are processed

When you request analysis, ReadMyBid processes the raw file and, when text can be extracted from a PDF, the extracted text, in order to generate the report. Files and extracted text are sent to a third-party AI provider, currently OpenAI. Analysis requests are made with the provider’s storage setting turned off where the product can set that option. That is a request to the provider, not a promise about what the provider keeps.

ReadMyBid does not intentionally save raw quote files or extracted quote text in its application database. The operators of ReadMyBid do not offer a saved-document vault in this MVP.

Original and revised quote files kept in browser memory for the revised-quote flow are cleared when you refresh or leave the page. Clearing the page does not delete copies that a third-party processor may already have received.

Service providers

Current providers include Vercel for hosting, OpenAI for AI analysis, and Supabase for analytics storage when that integration is configured. If analytics storage is not configured, the same event records may appear in server logs instead.

For provider-side abuse detection, ReadMyBid sends OpenAI a stable pseudonymous safety identifier created with a one-way keyed hash of connection information. ReadMyBid does not send the raw IP address in that identifier, although hosting and network providers may independently receive ordinary request metadata.

Those providers, and other infrastructure they rely on, may process or retain data under their own policies. ReadMyBid does not promise that third parties retain nothing.

Analytics

The product may record an anonymous session identifier, an event name, a sanitized file-type category (for example PDF or image), success or error state, and limited product-interaction metadata such as file count, whether a comparison ZIP was present, or a high-level document-match label on a revision check.

Analytics is not designed to receive filenames, quote contents, extracted text, street addresses, ZIP codes, contractor names, prices, or report findings. A random session identifier is stored in your browser with localStorage so related events can be grouped without an account.

New events may also carry a server-assigned internal-test or unmarked label. Feedback may carry the same distinction when enabled. Older records without a label remain unclassified; an unmarked record does not prove that it came from a customer.

Administrator session cookie

Signing in to the restricted administrator area sets an HttpOnly session cookie that expires after eight hours. It keeps the operator signed in and records whether internal-test mode is enabled in that browser. It is not set by ordinary homeowner use and is not an advertising cookie. Logging out clears it.

Feedback

Feedback submissions are stored in Supabase so the operator can review product problems and suggestions. Feedback is separate from anonymous analytics. If you provide an email address, it is used only to understand or reply to that submission. ReadMyBid does not automatically attach quote files, extracted text, report findings, or filenames to feedback.

Hosting, security, and operational logs

Hosting, security, and operational logs may include standard technical information such as IP address, browser or device data, request time, and error details. A short-lived in-memory limit on analysis requests uses connection information such as IP address. Those logs and limits are for operating and protecting the service, not for building a quote archive.

Purposes

Information is used to generate the analysis or calculator result you request, to operate and debug the service, to apply basic abuse limits, to understand whether people use the product (for example, whether an analysis finished), and to review or reply to feedback you submit.

Sharing

Quote files and related text are shared with the AI provider as needed to produce a report. Hosting and, when configured, analytics storage providers receive the technical and event data described above. ReadMyBid currently does not sell uploaded quote contents or personal information for advertising.

Retention

ReadMyBid does not intentionally retain raw quote files or extracted quote text in its application database. Retention by OpenAI, Vercel, Supabase, browsers, and other infrastructure is not fully known to us and may follow those providers’ policies. Do not assume a deletion timeline for third-party processing.

Feedback messages and optional reply email addresses remain in the feedback database until manually deleted. You may request deletion by contacting the email address listed below, but identifying an anonymous submission may not be possible without enough information to locate it.

Security limitations

ReadMyBid uses ordinary hosting and HTTPS as provided by its host. There is no claimed security certification, audit, or guarantee against interception, provider access, misconfiguration, or abuse. Uploaded documents can contain sensitive information. Removing unnecessary personal data before upload is the most reliable control available in this MVP.

Your choices

You can decline to upload files, omit optional ZIP fields, avoid the service, or clear site data in your browser (including the analytics session identifier in localStorage). There is no account-deletion flow because there is no account. ReadMyBid cannot reliably delete copies already processed by third-party providers.

Children

ReadMyBid is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 uploaded a document, contact hello@readmybid.com.

Changes

This policy may change as the product changes. The “Last updated” date at the top of this page will be revised when the posted policy changes. Continued use after a posted change means the then-current policy applies to later use.

Contact

Email hello@readmybid.com. There is no published office address or legal entity name for this MVP beyond the ReadMyBid product name.