Privacy Policy

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This includes: Account Information: Name, email address, company name, job title, phone number, and billing information. Usage Data: Information about how you use our platform, including bid activity, proposal data, approval workflows, and feature usage. Communications: Records of your correspondence with us, including support tickets and feedback. Technical Data: IP addresses, browser type, device identifiers, operating system, and cookies. We do not collect sensitive personal information such as government ID numbers, racial or ethnic origin, political opinions, or health data unless specifically required for regulatory compliance features you have activated.

We use the information we collect to: • Provide, operate, and improve our services • Process transactions and send related information • Send technical notices, updates, security alerts, and support messages • Respond to your comments, questions, and customer service requests • Monitor and analyze trends, usage, and activities on our platform • Detect, investigate, and prevent fraudulent transactions and other illegal activities • Comply with legal obligations • Personalize and improve your experience We do not sell, trade, or otherwise transfer your personal information to outside parties, except as described in this policy.

We implement industry-standard security measures to protect your information: Encryption: All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3. Access Controls: Role-based access controls ensure users only access data they are authorized to view. Audit Logging: All access to sensitive data is logged and monitored for suspicious activity. Regular Testing: We conduct quarterly penetration testing and annual security audits by certified third parties. SOC 2 Type II: Our security practices are annually audited against SOC 2 Type II standards. Despite these measures, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and report any security concerns immediately.

We retain your information for as long as your account is active or as needed to provide you services. Upon account termination: • Active data is deleted within 30 days of your request • Backup copies are purged within 90 days • Audit logs required for compliance may be retained for up to 7 years You may request deletion of your personal data at any time by contacting support@bidspher.com.

We may share your information with: Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, payment processing) under strict confidentiality agreements. Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset. Legal Requirements: When required by law, court order, or governmental authority. Protection of Rights: To protect the rights, property, or safety of Bidspher, our customers, or others. We require all third parties to respect the security of your data and treat it in accordance with applicable law.

Depending on your location, you may have the following rights: Access: Request a copy of the personal data we hold about you. Correction: Request correction of inaccurate personal data. Deletion: Request deletion of your personal data. Portability: Receive your data in a structured, machine-readable format. Objection: Object to processing of your personal data for certain purposes. GDPR Rights: If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation. To exercise any of these rights, please contact privacy@bidspher.com.

We use cookies and similar tracking technologies to improve your experience. Please see our Cookie Policy for detailed information about the cookies we use and your choices.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in our platform at least 30 days before the change takes effect. Your continued use of our services after the effective date constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: Bidspher Inc. Email: privacy@bidspher.com Support: support@bidspher.com Address: Washington, D.C., United States