Privacy Policy

Effective Date: May 20, 2026 · Last Updated: May 20, 2026
Operated by Patrick Ziobro, doing business as PremiumBid

This Privacy Policy explains how PremiumBid ("we," "us," or "our") collects, uses, stores, and protects information when you use our platform at premiumbid.net. By using the Service, you agree to the practices described in this policy.

Short version: We collect the information needed to run your account and process your RFQs. We do not sell your data. Your RFQ text is processed by our AI provider (Anthropic) to generate SOQs — it is not used to train AI models. You can request deletion of your data at any time.

1. Who We Are

PremiumBid is operated by Patrick Ziobro as a sole proprietorship in California. We provide AI-assisted SOQ and RFQ response drafting tools for contractors, engineers, architects, and other construction and professional services firms.

Contact: support@premiumbid.net

2. Information We Collect

Account Information

Name — your full name provided at registration
Email address — used for login, receipts, and service communications
Company name, trade/profession, contact details — entered in your Company Profile; used to personalize AI-generated output

Content You Submit

RFQ text and uploaded PDF documents — the bid documents you paste or upload for processing. This content is sent to our AI provider to generate your SOQ.
Company profile data — boilerplate, differentiators, fee schedule, logo, and branding settings you enter into your profile. Injected into every SOQ generation.
Generated SOQ output — stored and associated with your account so you can re-export past runs.

Payment Information

All payment transactions are handled directly by Stripe, Inc. We do not receive, store, or process your credit card number, bank account, or other payment credentials. We receive from Stripe only: a customer ID, subscription status, and transaction confirmation. See Stripe's Privacy Policy.

Technical and Usage Data

IP address — logged for security, rate limiting, and fraud prevention
Approximate usage metadata — number of runs, token counts, timestamps — used for quota enforcement and billing
Browser/device type — collected automatically as part of standard HTTP requests

3. How We Use Your Information

To create and manage your account
To run the AI pipeline and generate SOQ output from your RFQ input
To process payments and manage your subscription or credits
To provide customer support
To send transactional emails (receipts, password resets, service notices)
To enforce usage quotas and detect abuse
To improve and maintain the platform (aggregate, anonymized usage data only)

We do not send marketing emails without your consent. We do not use your RFQ content or SOQ output for advertising purposes.

4. Third-Party Services

We share data with the following third parties as necessary to operate the Service:

Provider	Purpose	Data Shared
Anthropic, Inc.	AI processing (Claude API)	Your RFQ text and company profile string are sent to Anthropic's API to generate SOQ output. Anthropic does not use API inputs to train its models. See Anthropic's Privacy Policy.
Supabase, Inc.	Database and authentication	Account info, company profile, run history, and SOQ outputs are stored in Supabase-hosted Postgres. Data is encrypted at rest. See Supabase's Privacy Policy.
Stripe, Inc.	Payment processing	Your email and billing details are shared with Stripe to process payments. We do not store payment card data. See Stripe's Privacy Policy.
Render Services, Inc.	Cloud hosting	Our application runs on Render's servers. All data transmitted through the platform passes through Render's infrastructure. See Render's Privacy Policy.

We do not sell, rent, or share your personal information with any third party for marketing or advertising purposes.

5. Data Retention

Account data — retained for the life of your account and up to 90 days after account closure
Run history and SOQ output — retained while your account is active. You may request deletion at any time.
RFQ text — stored in the database associated with each run. Encrypted at rest in Supabase.
Payment records — retained as required by law and Stripe's data retention requirements (typically 7 years for financial records)
Server logs — IP addresses and access logs are retained for up to 90 days for security purposes

6. Data Security

All data in transit is encrypted via TLS/HTTPS
All database data is encrypted at rest by Supabase
Each firm's data is isolated by tenant — other users cannot access your RFQs, SOQs, or company profile
Access to production systems is limited to authorized personnel
Authentication tokens expire after 8 hours

While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request a copy of the personal information we have collected about you in the past 12 months.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell your personal information. There is nothing to opt out of.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, contact us at support@premiumbid.net with the subject line "CCPA Request." We will respond within 45 days.

8. Cookies and Tracking

PremiumBid does not use advertising cookies or third-party tracking pixels. We use sessionStorage (browser session memory) to maintain your login state. This data is stored only in your browser and is cleared when you close your browser tab or log out. We do not use persistent cookies for tracking.

9. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a child under 18 has provided personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will notify active account holders by email. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

For privacy questions, data requests, or concerns:
PremiumBid
Email: support@premiumbid.net
Subject line: "Privacy Request" for data-related inquiries