Privacy Policy

BidList ("we," "us," or "our") operates the website bidlist.io and related subdomains (the "Site"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information.

1. Information We Collect

Information you provide directly

• Quote request forms: name, email address, phone number, home address, roof details, photos/files you upload, and any notes you include.
• Contractor waitlist: company name, contact name, email, phone number, and state.
• Report/proposal submissions: address, notes, and uploaded files.

Information collected automatically

• Analytics data: pages visited, time on site, browser type, device type, operating system, and general location (city/region level).
• Cookies & local storage: we use cookies and browser local storage to support analytics and remember your preferences (such as cookie consent and analytics opt-out choices).
• Referral & campaign data: the URL that referred you to our Site, UTM campaign parameters, and your landing page.

2. How We Use Your Information

• To connect you with licensed roofing contractors who can provide quotes for your project.
• To process and forward your quote requests to our contractor network.
• To communicate with you about your request or account.
• To improve our Site, services, and user experience through analytics.
• To detect and prevent fraud or abuse.

3. Third-Party Services & Data Sharing

We share your information only as needed to provide our services. We do not sell your personal information. We work with the following categories of service providers:

• Roofing contractors — we share your project details and contact information with contractors in our network so they can provide quotes.
• Analytics (PostHog, Vercel Analytics) — we use these services to understand how visitors use our Site. You may opt out of analytics tracking at any time (see Section 6).
• Google Maps API — used to geocode and validate the address you enter. Subject to Google's Privacy Policy.
• File hosting (UploadThing) — photos and documents you upload are stored by our file hosting provider.
• Communication tools (Slack) — contractor waitlist submissions are delivered internally via Slack.
• Embedded services (Zoho, Typeform, YouTube) — certain pages embed third-party content. These providers may collect data according to their own privacy policies.

4. Cookies

We use the following types of cookies and similar technologies:

• Essential cookies: required for basic site functionality (e.g., remembering your consent preferences).
• Analytics cookies: used by PostHog and Vercel Analytics to understand site usage. These are only set after you consent via the cookie banner.

You can manage cookie preferences through the banner that appears on your first visit, or by using the "Do Not Sell or Share My Personal Information" link in our footer.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Quote request data is retained as needed to complete your project request and for our business records. Analytics data is retained in aggregate form.

6. Your Rights & Choices

All visitors

• Opt out of analytics: use the "Do Not Sell or Share My Personal Information" link in our footer to stop analytics tracking.
• Cookie consent: you can decline non-essential cookies via the cookie banner.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you and how it is used.
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information (we do not sell your data, but you can opt out of analytics tracking).
• Not be discriminated against for exercising your privacy rights.

Other state privacy laws

Residents of Colorado, Connecticut, Virginia, and other states with consumer privacy laws may have similar rights to access, delete, and opt out. To exercise any of these rights, contact us at the address below.

7. Security

We use commercially reasonable measures to protect your personal information, including encrypted connections (HTTPS), server-side access controls, and limiting data access to authorized personnel. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated effective date. Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

BidList
Email: legal@bidlist.io