Privacy Policy

Last Updated: March 9, 2026

This Privacy Policy explains how Alchemy Labs ("we," "us," or "our") collects, uses, and protects your information when you use BidReady ("the Service"). We believe in transparency — this policy is written in plain language, not legalese.

The short version: We collect what we need to run the Service. We don't sell your data. Your proposals are yours. We use AI to generate content for you, not to train models on your data.

1. Information We Collect

Information You Provide

  • Account information: Your name and email address when you sign up
  • Profile and branding: Company name, logo, and brand colors you configure in settings
  • Proposal content: Project details, client information, scope, pricing, timelines, and other data you enter when creating proposals
  • Communications: Messages you send us (support emails, feedback submissions)
  • Waitlist information: Name, email, and role when you join the waitlist

Information Collected Automatically

  • Usage data: Pages visited, features used, proposal creation and editing activity, session duration
  • Device information: Browser type, operating system, screen resolution
  • Log data: IP address, access times, referring URLs, error logs
  • Cookies: We use essential cookies for authentication (session cookies, CSRF protection). See Section 6 for details.

Information We Do NOT Collect

  • Payment card numbers (handled entirely by Stripe — we never see or store your card details)
  • Location data beyond what's available from your IP address
  • Data from your other accounts or services
  • Your clients' personal information beyond what you include in proposals

2. How We Use Your Information

We use the information we collect to:

Purpose Data Used Why
Provide the Service Account info, proposal content Generate and store your proposals
Process AI generation Proposal inputs (scope, pricing, details) Send to AI models to generate proposal drafts
Process payments Email address (shared with Stripe) Handle subscription billing
Improve the Service Aggregated usage data Understand which features are used, fix bugs, prioritize development
Communicate with you Email address Send account-related emails, product updates, feedback requests
Ensure security IP address, session data, log data Prevent abuse, detect unauthorized access

3. How AI Processes Your Data

This is the section most people care about, so let's be specific:

What happens when you create a proposal

  1. You enter project details (scope, client name, budget, timeline, etc.)
  2. We send those details to our AI provider to generate a proposal draft
  3. The AI returns generated text (executive summary, scope of work, pricing breakdown, etc.)
  4. The generated draft is stored in your account for you to edit and use

What the AI provider sees

  • The project details you enter for that specific proposal
  • Your selected tone preference (professional, conversational, persuasive)
  • Your company name and basic branding context

What the AI provider does NOT see

  • Your email address or personal account information
  • Your payment information
  • Your other proposals or historical data
  • Your client's contact details (unless you include them in the project description)

AI training

We do not use your proposal content to train AI models. Your inputs and generated outputs are processed to deliver the Service — not to improve third-party AI systems. Our AI providers have data processing agreements that prohibit using customer inputs for model training.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. Period.

We share information only in these limited circumstances:

Service Providers

We use trusted third-party services to operate BidReady:

Provider What They Process Why
AI providers (Google Gemini) Proposal input data Generate proposal drafts
Stripe Email, subscription data Process payments
Google Cloud Platform All service data Host the application
Mailgun Email address Send transactional emails (magic links, notifications)

Each provider is bound by their own privacy policies and our data processing agreements. They process data only as needed to provide their service to us.

Legal Requirements

We may disclose your information if required by law, legal process, or government request. We will notify you before doing so unless legally prohibited.

Business Transfers

If Alchemy Labs is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We'll notify you before your data is subject to a different privacy policy.

5. Data Security

We take reasonable measures to protect your information:

  • Encryption in transit: All data is transmitted over HTTPS/TLS
  • Authentication: Passwordless magic link login — no passwords to steal or leak
  • Access control: Your proposals are private by default. Shared proposals are accessible only via unique, unguessable links
  • Infrastructure: Hosted on Google Cloud Platform with their security protections
  • CSRF protection: Cross-site request forgery prevention on all form submissions and API calls

No system is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security. If we discover a data breach affecting your information, we will notify you promptly.

6. Cookies

BidReady uses a minimal set of cookies:

Cookie Purpose Duration
Session cookie Keeps you logged in Expires when you close browser or after inactivity
CSRF token Prevents cross-site request forgery attacks Session

We do not use:

  • Advertising or tracking cookies
  • Third-party analytics cookies
  • Social media tracking pixels
  • Cross-site tracking of any kind

If we add analytics in the future, we will update this policy and, where required, obtain your consent.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

  • Access: Request a copy of the data we hold about you
  • Correction: Ask us to correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Export: Request a copy of your proposals in a portable format
  • Objection: Object to specific uses of your data

For EU/UK Users (GDPR)

In addition to the rights above:

  • Right to restrict processing
  • Right to data portability
  • Right to withdraw consent
  • Right to lodge a complaint with your local data protection authority

For California Users (CCPA)

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we don't sell your data)
  • Right to non-discrimination for exercising privacy rights

For New Zealand Users

Your rights under the Privacy Act 2020 are fully supported, including the right to access, correct, and request deletion of your personal information.

To exercise any of these rights, contact us at privacy@bidready.ai. We will respond within 30 days.

8. Data Retention

  • Active accounts: We retain your data for as long as your account is active
  • Deleted accounts: When you request account deletion, we delete your personal data and proposal content within 30 days
  • Waitlist data: Retained until you're invited or you request removal
  • Usage logs: Retained for up to 12 months, then deleted or anonymized
  • Payment records: Retained as required by applicable tax and financial regulations

9. Children's Privacy

BidReady is a business tool designed for use by adults (18+). We do not knowingly collect information from anyone under 18. If we discover we have collected information from a minor, we will delete it promptly.

10. International Data Transfers

BidReady is hosted on Google Cloud Platform in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We rely on Google Cloud's data protection measures and applicable transfer mechanisms (including Standard Contractual Clauses for EU data) to safeguard international transfers.

11. Changes to This Policy

We may update this Privacy Policy as BidReady evolves. When we make changes:

  • We'll update the "Last Updated" date at the top
  • For material changes, we'll notify you via email
  • Continued use of the Service after changes take effect constitutes acceptance

12. Contact Us

Questions about your privacy or this policy? We're here:

Email: privacy@bidready.ai
General support: support@bidready.ai
Company: Alchemy Labs

We built BidReady to help you work faster — not to collect or monetize your data. If you have questions about how we handle your information, ask us. We'll give you a straight answer.