Privacy policy

The short version. Your estimates, invoices, clients and price books are stored in your own browser and are never sent to us. We could not read them if we wanted to, and we could not hand them to anyone else. What follows is the detail.

Who we are

BidPaper operates this website and the browser-based document builder at/app. You can reach us at privacy@bidpaper.comabout anything in this policy.

Your documents: stored on your device, never on ours

Everything you enter into the builder — business details, client names and addresses, line items, prices, notes, terms, logos and signatures — is written to storage inside your own browser (IndexedDB, falling back to localStorage). It stays on that device.

This is architectural, not a policy promise we could quietly change:

• The builder sends nothing you type over the network. It loads its own code and styles from this site like any web page does, but it contains no call that transmits your data — enforced by an automated test that fails our build if any is added. The analytics beacon described below also runs in the builder; it reports that a page was viewed and how fast it loaded, never what is on it.
• PDFs are generated on your device by your browser. The file is handed to your downloads folder directly.
• There is no account, no sync and no server-side copy of any document.

The consequence, stated plainly: we cannot recover your work. If you clear your browser data or lose the device, the documents are gone. Use the backup export.

Backups you create

The backup export writes a JSON file to your own device. It is not transmitted anywhere. Where you then keep it, and who can read it, is entirely up to you — treat it like any other file containing your customers' details.

What we do collect

What is live today: server logs and cookieless website analytics, both described next. Advertising and subscriptions are described below because they are planned and you should know what they will involve — but neither is running yet. This section will be updated, and the date at the top changed, before either is switched on.

Website analytics

We use Cloudflare Web Analytics, a cookieless service, to count page views and see which pages are useful. A small script that Cloudflare adds to each page reports the page viewed, the page that linked to it, how quickly it loaded, and the kind of browser, operating system and device it was viewed on. Cloudflare also derives a country from your IP address; we see counts by country, never the address. It sets no cookies, stores nothing in your browser, does not fingerprint your device and does not follow you to other websites. We see aggregate counts, not individuals.

It runs on every page, including the builder, and it never sees what you type: a page view is a page view whether the document is empty or full. It is not loaded at all for visitors in the European Union, so nothing about their visits is counted.

Server logs

Our hosting provider records standard web-server logs when you request a page — IP address, timestamp, the page requested, browser user-agent. These are used for security and to keep the site working, and are retained for a limited period by the provider.

Advertising on content pages (not yet in use)

The guide and template pages will be supported by display advertising. Ad networks may set cookies or similar identifiers in your browser and may use them to personalize ads, subject to your consent where the law requires it. You will be offered that choice where applicable, and you can decline.

Ads never appear inside the builder. No advertising code is loaded on/app at all — this is verified by an automated test, not just intended. Nothing you type into a document is ever available to an advertiser, because it never leaves your device in the first place.

If you buy a subscription (not yet available)

There is currently no paid tier and no payment is possible. When there is, payment will be handled by Stripe. Your card details go to Stripe and never touch our systems. Of that transaction we store only your email address and a record of what you are entitled to — enough to issue and honour your license. We do not store your name, address or card data, and buying a subscription does not change where your documents live: still your device, still not ours.

Stripe processes your payment under its own privacy policy as an independent controller.

What we never do

• Sell or rent personal information.
• Upload, read, scan or index your documents — we have no mechanism to.
• Use your documents to train anything. The product contains no AI features at runtime.
• Load advertising, or anything that follows you across websites, in the builder.

Cookies and local storage

We set no tracking cookies of our own, and the analytics service sets none either. The builder uses your browser's local storage to hold your documents and a small amount of preference state (for example, whether you have dismissed the introductory note). That data is not a cookie, is not sent with requests, and is readable only by this site on your device. Clearing site data deletes it — including your documents.

Advertising cookies, where present, are described in the advertising section above.

Who else is involved

We keep the list of third parties deliberately short, and it is complete:

• Cloudflare hosts the site and serves every page. It processes the server logs described above and provides the cookieless analytics described above, and its network is global, so a request may be served from outside your country.
• Stripe will process payments if and when a paid tier exists, as an independent controller under its own privacy policy.

No ad network or other processor is in use today. Any addition will be listed here before it goes live.

How long we keep things

Server logs are retained for a limited period by our host and then discarded. Analytics figures are aggregate counts that identify no one. If a paid tier exists and you buy a subscription, we keep your email address and entitlement record for as long as the subscription is active and for as long afterwards as tax and accounting rules require, then delete it. We hold nothing else, so there is nothing else to retain.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export personal information we hold, and to object to certain processing. For most users of this site the honest answer is that we hold nothing to act on — no account, no documents, no profile. If you have purchased a subscription, write toprivacy@bidpaper.com and we will act on requests about your email address and entitlement record.

Your documents are already in your possession. You do not need to ask us for a copy, and we could not provide one.

Children

This is a tool for running a business and is not directed at children. We do not knowingly collect personal information from anyone under 13, or under 16 where that is the applicable age in your country.

Changes to this policy

If we change how data is handled we will update this page and the date at the top. Material changes — particularly anything that would alter the local-only guarantee above — will be called out prominently rather than slipped in.

Contact

Questions, requests or corrections:privacy@bidpaper.com.