Privacy Notice

1. Who operates BidGreat

BizClimb LLC operates BidGreat. Contact [email protected] about privacy, account closure or information associated with a request or review. This notice describes the current marketplace, not integrations or advertising tools that have not been activated.

2. Information we collect and why

We collect account and business details, service requests and answers, bids, messages, reviews, optional uploads, sign-in/security information and marketplace activity to operate BidGreat, communicate about activity, protect accounts, review abuse and understand how the service is used. We also receive source material for opportunities discovered outside BidGreat. Such material can concern someone who has not registered. Contact [email protected] about an unwanted or incorrectly attributed request.

Account information can include your name, email, phone number, business profile, selected services, service-area preferences and optional logo. Job and transaction records include requirements, prices, proposal revisions, appointments, selection and completion records, private messages and support reports. Avoid submitting sensitive information that the service does not request.

Technical records can include IP address information used for rate limiting or security, browser/request information, cookie identifiers, timestamps, activity events and email delivery status. We keep authentication secrets in protected forms such as password hashes and hashed one-time tokens rather than treating them as public profile data.

Agreement records contain the authenticated user ID, the version accepted, a server-recorded timestamp, the acceptance method and a link to the preserved policy copy and its integrity hash. The acceptance ledger does not collect a separate copy of your IP address or browser fingerprint. General security logs may still contain request information. These records support account administration, demonstrating agreement and resolving disputes.

3. Public information and restricted information

Published request descriptions, broad location, designated job photos and bidding information may be visible on the public marketplace. Approved reviews, their display names and photos, business replies, and associated business information are public. Exact-address fields, email addresses, source captures, private proposals, job-to-provider identity mappings and messages are restricted according to the feature and your role. Authorized operators may review them for marketplace operations and safety. Contact information may be shared with the other participant when the customer confirms a provider selection or a site visit, as described at that step. Public content can be copied by others; access restrictions cannot retrieve copies already made.

A provider's public business profile may show the business name, services and designated profile or review information. The public job-to-bid view limits competing provider identity and proposal visibility; this is separate from the existence of a public business profile. Account holders should review each form's audience description before submitting. Operators may access restricted information as needed for support, moderation and lawful operations; it is not confidential from the platform itself.

4. Photos and uploads

Photo submission is optional. We process supported uploads and remove embedded image metadata where supported by the upload pipeline. This does not remove identifying information visible inside a picture. Storage in a private bucket does not mean a photo designated for publication stays private: approved/published photos are served through the relevant public feature. Draft claim and pending-review photos remain restricted.

5. Service providers and AI

We use hosting, database/object-storage, security, transactional-email and AI-processing services. AI may help sanitize request text, suggest service categories/questions or prepare operator drafts. It can make mistakes; people should review the result. Where possible we limit information supplied to a service to what its task needs. Entering a ZIP code may send that ZIP to Zippopotam.us for location suggestions, using GeoNames data. Third-party websites you choose to open have their own practices.

We may disclose information when reasonably necessary to comply with legal requirements, respond to valid legal process, investigate misuse or protect rights and safety. Information may be handled in a business transfer subject to applicable law and appropriate notice; a transfer is not permission to disregard existing privacy obligations.

Operational providers may receive information needed to perform hosting, storage, delivery, security or AI-processing tasks. Your counterpart receives information needed for the marketplace action you request, including contact release after confirmed hiring or a visit. We do not currently sell personal information or share it for cross-context behavioral advertising. Optional measurement and masked session replay are described in the next section; third-party advertising tools are not active.

6. Cookies and marketplace measurement

BidGreat uses sign-in/session cookies, an anonymous first-party visitor identifier and internal marketplace-event records. Authentication and security functions are distinct from optional marketing or behavioral analytics.

With your prior optional consent, Google Analytics measures visits and navigation on our public landing and policy pages, and Microsoft Clarity creates masked interaction recordings and heatmaps to help us improve those pages. You may accept or reject both or choose them separately. Neither tool loads before consent, after rejection, on signed-in page loads, or on account, sign-in, job, bid, claim, review-writing, admin or message screens. Accepting marketplace terms is not consent to these tools.

These providers receive technical connection information such as your IP address, browser and device information, and permitted public-page activity. We do not send your name, email, account ID, proposal, message, form values or private request URL as analytics events. Google Analytics receives only fixed public-page paths, not query strings or fragments; advertising storage, Google signals and advertising personalization are disabled. Clarity text is masked, and neither tool starts on a public-page load containing a query string or fragment or a potentially sensitive referrer.

Use Cookie settings in the footer to change or withdraw choices at any time. We keep your choice in first-party local storage for up to 180 days. Optional identifiers may include Google's _ga cookies and Clarity's _clck and _clsk cookies. Withdrawing consent stops our optional tracking, removes accessible first-party measurement cookies, and reloads the page to unload recording scripts. It does not automatically erase information already processed by the providers; contact support about applicable access or deletion requests. We honor Global Privacy Control and Do Not Track signals by keeping these tools off.

Google and Microsoft process information under their applicable service and privacy terms, potentially on servers outside your state or country. See the provider privacy links below for more information. Google Search Console and Bing Webmaster Tools report search-engine discovery and performance; they do not require a visitor tracking script on BidGreat. Browser settings can restrict cookies, but disabling session cookies may prevent sign-in or other account features.

7. Retention and your requests

We keep information while needed for the service and relevant security, dispute and legal purposes. A form draft's availability window is not a promise that every associated backup or upload is physically deleted at the same time. Contact [email protected] to request access, correction or deletion, or account closure. We may verify your identity and retain information where reasonably necessary or legally required. We will explain any applicable limitation on a request.

Depending on applicable law, additional privacy rights may apply. We use access controls and security measures, but no system or transmission can be guaranteed completely secure.

Retention depends on whether your account or request remains active, the sensitivity and purpose of a record, outstanding transactions, disputes, security investigations and applicable legal requirements. Sign-in links and sessions expire, but expiry is not the same as immediate deletion from all logs and backups. Ordinary cleanup removes certain expired authentication and draft records; other marketplace and acceptance records may remain needed for the purposes above.

Account closure and deletion are reviewed separately from cancelling a job or service agreement. We may need to retain limited transaction, abuse-prevention or agreement records, and shared conversations or public reviews may implicate another person's rights. We will assess deletion requests under applicable law rather than promise that closing an account instantly erases every copy. When restoring a backup, applicable deletion restrictions should continue to be honored.

8. Your choices and applicable privacy rights

You can update available account and business fields, choose whether to upload photos, decline optional invitations, and use browser cookie controls. Required authentication cookies support signed-in features. You can contact [email protected] to request access to, a copy of, correction of, or deletion of your personal information. State the request clearly without emailing passwords or verification links.

Depending on where you live and whether the relevant law applies, you may have additional rights such as portability, restricting certain processing, opting out of sale, targeted advertising or certain consequential profiling, or appealing a denied request. We do not currently operate those advertising uses. We will evaluate requests and applicable deadlines under the law that applies rather than assume all laws provide identical rights.

We may need proportionate information to verify your identity or an authorized agent's authority before releasing or changing private records. We will explain a denial or applicable limitation and you may ask us to reconsider by emailing support with the original request. We will not retaliate for exercising legally protected privacy rights. You may also contact the appropriate privacy regulator.

9. Security and processing locations

We use measures such as access controls, restricted storage, authentication and monitoring appropriate to the features we operate. No online service can guarantee perfect security. Protect your own devices and email access and contact support promptly about suspected unauthorized activity. Do not submit financial account numbers, government ID documents or other unnecessary sensitive data in ordinary job or review fields.

BidGreat is operated in the United States. Our infrastructure and service providers may process information in the United States or other locations where they operate. Applicable safeguards and legal requirements still apply to processing and transfers. Using the service does not waive rights that cannot lawfully be waived.

If a security incident triggers a legal notification duty, we will provide the notices required by applicable law. A security report or routine login notice is not a promise that every event will be detected immediately.

10. Communications, children and updates

We send requested sign-in and service-related emails. Review-request emails have an opt-out that does not disable essential account/security messages. Accepting the Terms is not blanket consent to unrelated marketing or text messages. The service is for adults, not directed to children. Contact us about suspected use by a child so it can be reviewed.

We will update this notice when practices materially change and provide notice or request consent where required. The date and version at the top identify this notice.

11. Optional Sign in with Google

When available, you may choose Google instead of an email sign-in link or password. Google authenticates you on its own website; we do not receive your Google password. We request only your basic identity, email address and profile (openid, email and profile scopes). Google returns an account identifier, email and verification information and, when provided, a display name. We use this information to authenticate you, create or connect your BidGreat account and protect against unauthorized account linking. A Google profile photo may be included in Google's identity response, but this login integration does not save or display that photo.

We store the Google account identifier associated with your BidGreat account, along with account details such as email and name and connection timestamps. Temporary authentication records support completing and securing sign-in. Google access and ID tokens are processed transiently to verify sign-in and are not retained as long-term account credentials; this login flow does not request offline access or store a Google refresh token. Account and connection records remain while needed for the account, subject to the retention and deletion practices above.

Google receives the sign-in request and technical information needed to authenticate you. Our hosting, database and security service providers process the resulting account information only as needed to operate and protect BidGreat. We do not sell Google user data, use it for advertising or send Google authentication data to AI services. BidGreat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Signing in with Google does not grant BidGreat access to Gmail, Google Drive, your contacts or Google Business Profile reviews or management. It does not verify your professional qualifications or automatically make you a provider. Any future Business Profile connection will require a separate, clearly explained authorization; Google review imports and Google reply publishing are not currently connected.

You can remove BidGreat's access in your Google Account's third-party connections settings at https://myaccount.google.com/connections. Revoking Google access does not automatically delete your BidGreat account or sign out an existing BidGreat session. Sign out on BidGreat as well if needed; email-link and password methods remain available. Contact [email protected] to request removal of a Google account connection or deletion of associated data. We verify such requests and handle them under the retention and privacy-rights practices above. Google's privacy policy is available at https://policies.google.com/privacy and its API Services User Data Policy at https://developers.google.com/terms/api-services-user-data-policy.

Address suggestions — feature notice September 10, 2026

When you type in the claim form’s street-address field, Google Maps receives the address text and technical connection information, such as your IP address and browser details, to suggest matching US addresses. Google is not contacted just by opening the claim form. You can keep the address you type without selecting a suggestion, or leave this optional field blank.

Only the address you select or enter is saved with your claim when you submit it. We do not save suggestion lists, Google place details or coordinates, and we do not send Google your claim link, email, job details or messages. Your street address is not displayed publicly; it is shared with the pro you choose or when you approve a site visit. This feature is separate from optional analytics and does not enable Google Analytics or Clarity on claim pages.

Suggestions are provided under the Google Maps/Google Earth Additional Terms of Service and Google Privacy Policy. Check the address before confirming your request. This supplemental feature notice does not change the archived September 9 marketplace agreement or your recorded acceptance.