Privacy Policy

Last updated: July 14, 2026

The short version. We collect very little about you directly: an email address to sign you in, and basic usage data to keep the service running. The bulk of the personal information in Bid Manager is the subcontractor contact data that our customers (general contractors) upload. That data belongs to them, and we only process it on their instructions. We do not sell personal information, and we do not show ads.

1. Who this covers

This policy explains how Humanear, Inc. ("Humanear," "we," "us") handles personal information in connection with Bid Manager (the "Service") and the bidmanagerhq.com website.

There are two different groups of people involved, and we treat them differently:

Account holders — general contractors and their team members who sign in to Bid Manager. For their information, we are the business responsible for deciding how it is used.
Subcontractors and their staff — people whose contact details a general contractor uploads to their directory, and who receive invitations to bid. For that information, we act on behalf of the general contractor. They decide who is in their directory and who gets contacted; we process it under their instructions and our agreement with them. If you are a subcontractor and want your details corrected or removed, the fastest route is to contact the contractor who invited you. You can also contact us and we will help route it.

2. What we collect

Information you give us

Account information: your email address, your name if you provide it, your company name, role, and your company logo if you upload one.
Customer Data you upload: subcontractor contact records (company, contact name, email, phone, mobile, address, city, state, trade codes), project details, and project documents such as drawings, specifications, and addenda.
Communications: messages you send us for support.
Demo requests: if you fill in the request form on our website, the details you provide there.

Information we generate as you use the Service

Invitation activity: when an invitation is emailed, whether the plan room link was opened, how many times, and when it was last viewed.
Document activity: which documents were downloaded, by which invited company, and when.
Bid responses: whether an invited company said it is bidding or declined, and any bid amount the contractor records.
Delivery events: if an invitation email bounces, we record that so the contractor knows the address is bad.
Technical logs: IP address, browser type, and timestamps, used for security, abuse prevention, and debugging.

We want to be clear about invitation tracking, because the people being tracked did not sign up with us: when a contractor invites a subcontractor, we record whether the invitation was opened and which files were downloaded, and we show that to the contractor. This exists so contractors know whether their bid invitations are actually reaching people. It is described in the invitation and the plan room.

Cookies and local storage

We use browser local storage to keep you signed in between visits. We do not use advertising cookies, and we do not run third-party analytics or ad trackers on the application. Clearing your browser storage will sign you out.

3. Phone numbers and text messaging

We store subcontractor phone numbers in a standardized format so they can be used for calling and, in future, text notifications. Storing a number does not mean we text it. Text messages are only sent to people who have affirmatively opted in, and opting out is always available by replying STOP. Full details are in our SMS Terms.

4. How we use information

To provide the Service: authenticate you, host your documents, send the invitations you ask us to send, and show you the results.
To support you when you contact us.
To keep the Service secure, prevent abuse, and diagnose problems.
To bill you, if you are on a paid plan.
To send you service and account messages. We may send occasional product updates to account holders; you can opt out of non-essential email.
To comply with law.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your Customer Data to train machine-learning models.

5. Service providers we share data with

We use a small number of vendors to run the Service. They may process personal information only to provide their service to us, under contract.

Provider	What it does	What it can see
Supabase	Database and authentication	Account data and Customer Data at rest
Cloudflare	Hosting, application delivery, document storage	Uploaded documents, request logs, IP addresses
SMTP2GO	Sending invitation and notification email	Recipient email addresses and message content
Anthropic	Assists with matching your trade labels to standard CSI codes during contact import	Only the trade or category text being matched (for example, "Plumbing"). We do not send contact names, emails, or phone numbers.
Twilio	Text message delivery, if and when SMS notifications are enabled	Recipient phone number and message content

We may also disclose information if required by law, to enforce our agreements, to protect rights and safety, or in connection with a merger or sale of the business (in which case we will tell you).

6. Where data is stored

Data is stored in the United States. Our providers may operate globally distributed infrastructure for delivery and caching.

7. How long we keep it

Customer Data is kept while the account is active, so contractors retain their bid history.
After an account closes, Customer Data is available for export for 30 days, then deleted from active systems. Encrypted backups age out on our normal backup cycle.
Technical logs are kept for a limited period for security and debugging.
We keep what we must for tax, accounting, and legal obligations.

8. Security

We take security seriously and review it regularly. Measures include: encryption in transit (HTTPS) and at rest; row-level database security so each customer's data is isolated at the database layer; passwordless sign-in, so there is no password for us to lose; documents stored in private storage that is only reachable through an authorized request; unique, unguessable plan room links; and strict content security policies on public pages.

No system is perfectly secure. If a breach affects your personal information, we will notify you and any regulator as required by law.

9. Your rights and choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct information that is wrong.
Delete information, subject to legal limits.
Receive a copy in a portable format.
Opt out of non-essential communications at any time.
Not be discriminated against for exercising these rights.

To exercise any of these, email hello@bidmanagerhq.com. We will verify your identity before acting.

If a general contractor uploaded your details: we hold that data on their behalf, so we will usually refer your request to them, or act on their instruction. We will tell you who that is and help you reach them.

10. Children

Bid Manager is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe we have, contact us and we will delete it.

11. Changes to this policy

We may update this policy. If a change is material, we will notify account holders by email or in the app. The "last updated" date above always reflects the current version.

12. Contact

Humanear, Inc.
Sioux City, Iowa, USA
hello@bidmanagerhq.com