This page is pending legal review and will be updated before launch.

Privacy Policy

Last updated: May 2026

What data we collect

When you submit the intake form on our booking page, we collect your name, email address, Upwork profile URL, current monthly Upwork earnings range, primary niche, and any additional information you choose to provide. We also record how you found us (the "utm_source" query parameter, if present) and basic request metadata such as your IP address and user agent.

If you create an account (after subscribing), we store your email address and any profile information you provide. Authentication data (such as your Google OAuth identifier) is managed by our auth provider, Supabase.

We do not collect analytics cookies in v1. We use Vercel's built-in analytics dashboard, which provides aggregate page-view counts without setting cookies on your device.

How we use it

We use your intake form data to evaluate whether BidFirst is a good fit for you and to prepare for your discovery call. Your account data is used to provide the BidFirst service — matching you with relevant Upwork jobs and drafting proposals.

We do not sell your personal data. We do not use it for advertising. We use it solely to operate and improve the service.

Sub-processors

We share data with the following service providers, who process it on our behalf under data processing agreements:

  • Supabase — authentication, database hosting, and real-time services
  • Lemon Squeezy — payment processing and subscription management
  • OpenRouter — AI model API for proposal drafting
  • Resend — transactional email delivery (magic links, notifications)
  • Apify — job data collection from Upwork's public feed
  • Vercel — application hosting
  • Cal.com — booking and scheduling

Data retention

We retain your data for as long as you have an active subscription. If you cancel your subscription, we retain your data for 60 days in case you decide to resubscribe. After that period, we delete your account data upon request.

Intake form submissions from prospects who do not become customers are retained for 90 days, then deleted.

Data export and deletion

You may request a copy of your personal data or ask us to delete it at any time by emailing support@bidfirst.io. We will respond to your request within 30 days.

Cookies

We use a single authentication session cookie to keep you logged in. We do not use analytics cookies, advertising cookies, or third-party tracking cookies in v1.

Contact

For any privacy-related questions or requests, contact us at support@bidfirst.io.