Draft for review. The highlighted items are details we still need. This page is not live until they're filled in.

Legal

Privacy Policy

Last updated [date we publish]

This page explains what we collect when you use 10minutebids.com, why we collect it, who helps us run the service, and how to get your data deleted. In short: we collect what we need to read your plans and deliver your bids. We don't sell your information, and we don't use advertising trackers.

1. Who we are

10 Minute Bids is run by [company legal name], [mailing address], Washington ("we", "us"). Questions about your data go to [contact email].

2. What we collect

What you give us

Your account: your name, email and phone number, and whether you're a homeowner or a contractor. Contractors also give us their trade, and their company name if they want to. We store your password only as a scrambled one-way code (a salted hash), so nobody can read it, us included.
Your projects: the plan sets you upload, the project address and any notes you add, and the orders you place.
What we make for you: the 3D model, quantities, draft bids and supplier order sheets for your orders.

What we get from others

Payments: Stripe processes your card. We get the payment result and amount. We never see or store your full card number.

What we collect automatically

Your IP address, to limit how many accounts and uploads can come from one network in a day. We keep that count for about 2 days.
A login cookie that keeps you signed in for up to 30 days (see Cookies).
Basic request logs kept by our hosting provider, such as IP address, browser type and the pages requested. They are used for security and to fix problems.

We don't use advertising trackers or third-party analytics cookies.

3. How we use it

To run your account and log you in.
To read your plans, build your 3D model, measure your trades and deliver your bids.
To take payment and keep the records the law requires.
To contact you about your orders, like questions about your plans, delivery, fixes and refunds.
To prevent abuse and keep the service secure.
To find and fix our mistakes and improve how we read plans, for example when a bid needed a correction.

We don't sell or rent your personal information, and we don't share it for advertising.

4. How AI reads your plans

We use AI models from Anthropic (Claude) to read plan sets and help build models and bids. To do that, your plan files and the text we pull from them are sent to Anthropic, which processes them under its own terms. We don't use your plans to train AI models of our own.

We share your information only with the companies that help us run the service. We share only what each one needs for its job:

Cloudflare: hosts the website and stores your account and plan files. It also protects the site, including the "are you a person" check at sign-up.
Anthropic: AI plan reading (see section 4).
Stripe: payments.
Build Radar: [our order and production system: it takes the order, runs the payment and builds the model and bids. Confirm how to describe it: same company, or a separate one we work with?]
Google Fonts: the site's fonts load from Google, which sees your IP address when they load.
[Email delivery service, if we send order emails: name it here.]

We may also share information if the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of our business. In a sale or merger, this policy would continue to protect your information.

6. How long we keep it

Your account: until you close it.
Plan sets and what we made from them: for [2 years] after your last order, so you can come back to them. You can ask us to delete them sooner.
Payment and tax records: as long as the law requires, usually 7 years.
IP address counts: about 2 days.

7. Your choices

Email [contact email] from the address on your account to:

get a copy of your information and your files,
correct your information,
delete your plan sets, or close your account and delete your data.

We'll answer within 30 days. We may need to keep some records after a deletion, such as payment records the law requires us to keep.

8. Security

Everything travels over encrypted connections (HTTPS). Passwords are stored only as salted hashes. Plan files sit in private storage that only your account and our staff can reach. No system is perfectly secure, but we work to protect your information. If a breach affects your data, we'll tell you as the law requires.

9. Cookies

We set one cookie ourselves. It keeps you logged in, lasts up to 30 days and is removed when you log out. Cloudflare, which runs the site, may set a short-lived security cookie that helps tell people from bots. The site also remembers whether you picked the light or dark theme. That choice is saved in your own browser and never sent to us. We don't use advertising or tracking cookies.

10. Children

10 Minute Bids is for adults. You must be 18 or older to make an account, and we don't knowingly collect information from children.

11. Changes

If we change this policy, we'll update the date at the top. If the change is important, we'll email you before it takes effect.

12. Contact us

[company legal name]
[mailing address]
[contact email]