Document —Privacy Policy
Form PP-01 — Privacy PolicyRev. 07-2026

Privacy Policy

Effective date: October 14, 2026

BidDibs (“BidDibs,” “we,” “us”) is operated by SMB Spark LLC, a California limited liability company. This policy explains what we collect when you use biddibs.com, why we collect it, and the choices you have. Questions any time: hello@biddibs.com.

What we collect

Information you give us. When you fill out our form, we collect your email address, your trade or NAICS code, your answer to our question about hours spent on past bids, and any bid package files (PDF or ZIP) you choose to upload. When you pay for a kill sheet, your payment is processed by Stripe; we receive confirmation of payment and your email address, but your card number is never sent to or stored by us.

Information collected automatically. Like most websites, our hosting infrastructure collects basic technical data — such as IP address, browser and device type, approximate location (country or city, worked out from the IP address), the website that referred you, pages viewed, and visit duration — for security and to give us simple aggregate statistics (for example, how many people visited the site and where they came from). These statistics come from the visitor analytics built into our website host, Lovable. It counts visits rather than identifying individual people, and we see only totals, not a record of any one visitor. Lovable processes this data on our behalf. Lovable states that it also creates de-identified data from it (data that can no longer be linked to you) to improve its own services, and that it does not use this data to train AI models. We do not use third-party advertising trackers. When you submit our order form, we also record the IP address the submission came from. We use it only to prevent fraud and abuse, and it is included if you ask us to delete your information.

How we use it

  • To produce and deliver the kill sheet you requested.
  • To reply to you and communicate about your request or the service.
  • To understand demand for BidDibs (for example, which trades are signing up).
  • To keep the site secure and working.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Uploaded bid packages

Bid packages you upload are stored privately and used only to prepare your kill sheet. We understand these documents can be commercially sensitive. We use AI processing services (Anthropic's Claude) to help extract information from your documents; these providers process the documents to deliver the service, not to advertise to you. We do not publish your documents or share them with other users.

Where your data lives

Form submissions and uploaded files are stored with Supabase, our database and storage provider, in the United States (US West region). Our website is hosted and delivered through Lovable and its infrastructure providers (including Cloudflare). Payments are processed by Stripe, Inc.; your card details are entered on Stripe's payment page and handled under Stripe's own privacy policy. We deliver kill sheets and service emails using Resend, our email delivery provider.

Cookies

biddibs.com does not use advertising or cross-site tracking cookies, and there is no third-party ad network on the site. The site sets three short-lived cookies, all on biddibs.com itself:

  • __cf_bm (Cloudflare): protects the site from automated bot traffic. Strictly necessary; expires after about 30 minutes.
  • __dpl (Lovable, our website host): used to deliver the site. Its contents identify the version of the site being served, not you. Expires after about two days.
  • session-id (Lovable visitor analytics): a random identifier that lets us count one browsing session as one visit. It is not linked to your name, email, or order. Expires within about a day.

The site does not store anything else in your browser. You can delete or block cookies in your browser settings.

Because none of these are advertising cookies, we don't show a consent banner. If that ever changes (for example, if we add an analytics or marketing tool that requires consent), we will add one and update this policy.

How long we keep it

We keep form submissions and uploaded documents for as long as needed to deliver your kill sheet and operate the service. You can ask us to delete your information at any time (see below).

Your choices and rights

Email hello@biddibs.com and we will:

  • Tell you what information we hold about you.
  • Correct it if it's wrong.
  • Delete it, including any uploaded documents.

Depending on where you live (for example, California or the EU/UK), you may have additional legal rights over your personal data; we will honor valid requests.

Children

BidDibs is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we'll update the effective date at the top. Material changes will be noted on this page. Earlier versions are available on request at hello@biddibs.com.

Contact

hello@biddibs.com

Changelog

October 14, 2026 — listed each cookie the site sets by name, purpose, and duration (adds the session-id visit-counting cookie and the __dpl hosting cookie); described the visitor analytics built into our website host, Lovable, including what it collects and its de-identified use.

July 10, 2026 — named Stripe (payments) and Resend (email delivery) as processors; disclosed order-form IP logging.

July 4, 2026 — first published.