1. Introduction
Welcome to BidPilotPro. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, store, use, and protect your data when you use our website and Chrome extension.
By using BidPilotPro, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
We collect the following types of information:
2.1 Account Information
- Email address: Used for account creation, authentication, and communication
- Password: Securely hashed and stored for account authentication
2.2 Profile and Account Data
- Upwork Account Information: Account name, title, profile summary, GitHub URL, and portfolio URL
- Freelancer Account Information: Account name, title, profile summary, GitHub URL, and portfolio URL
- Preferences: Proposal length preferences, tone preferences, and other customization settings
2.3 Proposals Data
- Job Information: Job ID, title, description, budget, and posted date
- Cover Letters: Generated and submitted cover letters for job proposals
- Proposal Answers: Answers to additional questions asked by clients
2.4 Past Works
- Project URLs: Links to your past work projects
- Skills: Skills associated with each past work
- Overview: Descriptions and summaries of your past work
2.5 Payment and Subscription Data
- Subscription Information: Plan type, subscription status, billing period
- Payment Data: Processed securely through Stripe (we do not store credit card information)
- Balance Information: Account balance and transaction history
2.6 Support Data
- Support Tickets: Messages, attachments, and communication history
- Ticket Status: Open, closed, and resolution information
3. How We Store Your Data
All your data is stored securely using Supabase, a cloud-based database platform that provides:
- Encryption: Data is encrypted both in transit (using TLS/SSL) and at rest
- Secure Authentication: Passwords are hashed using industry-standard algorithms
- Database Security: PostgreSQL database with role-based access control
- Backup and Recovery: Regular automated backups to ensure data integrity
- Compliance: Supabase complies with GDPR, SOC 2, and other security standards
Your data is stored in secure data centers and is only accessible to authorized personnel and systems necessary to provide our services.
4. How We Use Your Data
We use your data for the following purposes:
4.1 Service Provision
- To create and manage your account
- To generate personalized proposals based on your profile and past work
- To match your past works with relevant job opportunities
- To track and manage your proposals
- To process payments and manage subscriptions
4.2 Proposal Generation
- We use your account information, past works, and preferences to generate personalized cover letters
- Your past works are matched with job descriptions using AI-powered similarity matching
- Generated proposals are stored in your account for future reference
4.3 Communication
- To send you important account-related notifications
- To respond to your support requests
- To send password reset emails and other authentication-related communications
4.4 Service Improvement
- To analyze usage patterns and improve our services
- To fix bugs and enhance functionality
- To ensure security and prevent fraud
5. Third-Party Services
We use the following third-party services to provide our functionality:
5.1 Supabase
- Purpose: Database storage and user authentication
- Data Shared: All account data, proposals, past works, and preferences
- Privacy Policy: https://supabase.com/privacy
- Security: Data is encrypted and stored securely in Supabase's infrastructure
5.2 OpenAI
- Purpose: AI-powered proposal generation, text embeddings, and content summarization
- Data Shared:
- Job descriptions and requirements
- Your profile information (title, bio, portfolio links)
- Past work overviews and descriptions
- Proposal preferences and instructions
- Privacy Policy: https://openai.com/policies/privacy-policy
- Data Usage: OpenAI processes your data to generate proposals but does not use your data to train their models (as per their API terms)
5.3 Stripe
- Purpose: Payment processing and subscription management
- Data Shared: Payment information, billing details, subscription status
- Privacy Policy: https://stripe.com/privacy
- Security: Stripe handles all credit card information securely and is PCI-DSS compliant
- Note: We do not store your credit card information on our servers
6. Your Rights
You have the following rights regarding your personal data:
6.1 Access
You have the right to access all personal data we hold about you. You can view most of your data directly through your account dashboard.
6.2 Correction
You can update and correct your personal information at any time through your account settings or by contacting our support team.
6.3 Deletion
You have the right to request deletion of your personal data. To delete your account and all associated data:
- Contact us at admin@bidpilotpro.com with your deletion request
- We will delete your account and all associated data within 30 days
- Note: Some data may be retained for legal or regulatory purposes (e.g., payment records)
6.4 Data Portability
You can request a copy of your data in a machine-readable format. Contact our support team to request your data export.
6.5 Withdrawal of Consent
You can withdraw your consent for data processing at any time by deleting your account or contacting us. However, this may affect your ability to use our services.
6.6 Objection to Processing
You have the right to object to certain types of data processing. Contact us if you wish to exercise this right.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide our services. Specifically:
- Account Data: Retained until account deletion
- Proposals: Retained until account deletion
- Past Works: Retained until account deletion
- Payment Records: Retained for legal and accounting purposes as required by law
- Support Tickets: Retained for customer service purposes
When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes.
8. Data Security
We implement industry-standard security measures to protect your data:
- Encryption of data in transit and at rest
- Secure password hashing (passwords are never stored in plain text)
- Regular security audits and updates
- Access controls and authentication requirements
- Secure API endpoints with rate limiting
- Regular backups to prevent data loss
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
9. Chrome Extension
Our Chrome extension collects and transmits the same data types mentioned above. The extension:
- Requires authentication via your BidPilotPro account
- Transmits job information and generated proposals to our servers
- Uses secure API endpoints with authentication tokens
- Does not store data locally beyond session information
- Respects the same privacy standards as our website
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: admin@bidpilotpro.com
- Support: Visit our support page to submit a ticket