Privacy Policy

1. Who we are

Bidoogle is a web app that helps small businesses find, qualify and prepare US government contract bids. In this policy, "we" and "us" mean Bidoogle. You can reach us about privacy at hello@bidoogle.com. Bidoogle is operated by Healthcare Hustle LLC, a Florida limited liability company.

2. What we collect

We collect what you give us and what the service records while you use it:

• Account details: email address, a hashed password or a one-time sign-in link, business name, NAICS codes, home state, and your SAM.gov registration status and UEI. If you sign in by magic link, we store a one-time token that stops working once it is used.
• Work product: proposals and bid drafts, your capability statement, contacts you add, documents you upload, and messages you send to the assistant.
• Service records: your watchlist, release and deadline-alert email history, and email that arrives in your Bidoogle inbox.
• Billing: plan and subscription status. Card details go to Stripe; we do not receive or store card numbers.

We do not buy personal data, and we do not collect data about children.

3. How we use it

We use your information to create and secure your account, sign you in, show opportunities that match your profile, draft and store proposals, send deadline alerts and release announcements, process payments, provide support, keep the service working and prevent abuse. We also use it to meet our legal and tax obligations.

4. Our purposes, in plain language

Where the law asks us to name a basis for processing, ours are: performing the contract we have with you (running your account and the features you use); our legitimate interests (keeping the service secure, fixing problems, improving the product); your consent (marketing email, which is opt-in); and legal obligation (tax, accounting and lawful requests). You can withdraw consent for marketing at any time without affecting your account.

5. Who we share with

We share data with the processors that run the service, and with no one else for their own marketing:

• Cloudflare: hosting, Workers and our D1 database.
• Resend: transactional email.
• Hostinger: inbound mail for your Bidoogle inbox.
• OpenRouter: the AI assistant and bid drafting. Your text is sent to the model provider to generate a reply.
• Stripe: payments. Card data is handled by Stripe and never stored by us.

We also read public data sources, including SAM.gov, DemandStar, state and local procurement portals and USAspending, to show you opportunities. We may disclose information if the law requires it, or to protect the rights and safety of users or the public.

6. Cookies

We use one session cookie to keep you signed in. We do not use advertising cookies, we do not run tracking pixels, and we do not sell or share your data with ad networks. If that changes, we will say so here and ask for consent where the law requires it.

7. How long we keep it

We keep account and work-product data while your account is open. If you ask us to delete your account, we delete your data within 30 days, except records we must keep for legal, tax or accounting reasons, and limited backups that expire on their normal cycle. Alert and release email history is kept while your account is active so you can check what was sent.

8. Security

Passwords are stored as hashes, not plain text. Traffic to the service is encrypted with TLS. We apply rate limiting and access controls, and we keep the number of people who can reach production data small. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

9. Your rights and choices

You can ask to see the personal data we hold about you, correct it, export it, or delete it. Email hello@bidoogle.com from your account address and we will respond within the time the law allows. You can update most account details yourself on the account page. Every marketing email has a one-click unsubscribe; alerts and release announcements are part of the service and are sent to account holders. Unsubscribing from marketing does not close your account.

10. Children

Bidoogle is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, email hello@bidoogle.com and we will delete it.

11. International users

The service is hosted in the United States, and our processors may store data there. If you use Bidoogle from outside the US, you understand that your data is transferred to and processed in the US under US law.

12. Changes to this policy

We may update this policy. If a change is material, we will email account holders before it takes effect. The effective date at the top shows the current version.

13. Contact

Privacy questions, access requests and deletion requests: hello@bidoogle.com. Bidoogle is operated by Healthcare Hustle LLC, a Florida limited liability company.