Privacy
Your bid data stays yours.
BidTriage is a triage layer over the bid sources you already use. We read your invitations to organize and score them. We do not sell your data, do not pool it with anyone else’s, and do not write to the portals on your behalf. The plain-language version is below.
- What we access
BidTriage reads the bid invitations and project documents in the bid-source portals and inboxes you connect: ConstructConnect (including the ITB networks inside it, such as iSqFt and SmartBid), BuildingConnected, and a shared email inbox. We read these sources; we never post, bid, or write back to them on your behalf.
We do not request or need your accounting system, your CRM, or your banking information to operate.
- What we do with it
We aggregate and organize your invitations into one queue, de-duplicate records that describe the same opportunity, and score them against the rules and history you give us. We never sell, rent, or share your bid data, and your records are not pooled with another customer's data
Your records are kept as they came in. We associate and organize; we do not merge, rewrite, or silently delete the source records.
- Where it lives
Your data is hosted in the United States across two providers: the application and your bid documents run on Google Cloud, and the database runs on Supabase in AWS US-West. Your workspace is isolated at the row level ; every query is scoped to your organization, so your records are never returned alongside another customer's. Access is limited to the people who operate the service for you and is logged.
- Your control
The data is yours. You can request an export at any time, and when you leave we delete your data on request.
- The browser extension
The BidTriage Sync Helper extension captures bid documents from the portals your team already logs into. It operates only on those sites (BuildingConnected/Autodesk, ConstructConnect and its document services including iSqFt and SmartBid, and bidtriage.com) . It has no access to your other browsing, your email, or your history elsewhere.
To fetch documents on your behalf, the extension reads the session credentials of the portal accounts you are logged into and sends them, encrypted and signed, to your BidTriage workspace. They are used only to download your bid documents and metadata, and are never shared with anyone.
When the extension captures a document in the background, it cancels the browser's duplicate local download of that same file so your Downloads folder isn't littered with copies you didn't ask for. Downloads you start yourself behave normally.
The extension also reports its own health (version, last-active time, and which capture step succeeded or failed), so broken capture is visible instead of silent. That telemetry describes the capture machinery, not your browsing.
- This website
When you request a demo on this site, we collect what you type into the form (name, email, company, and any message) and it is sent to us as an email. That is what we keep.
- The investor area
Pages in our password-protected investor area log which slides are viewed and for how long, attributed to the named link we issued to that person. We use it to know who has read our materials. That activity is visible only to us : it is never shared, sold, or used for anything else, and it applies only inside the investor area, never to this website's public pages.
- Error reporting
We collect application error reports (via Sentry, when enabled) and server logs to keep the service working. Error reports are scrubbed of request bodies and bid content.
- Chrome Web Store disclosures
For the Chrome Web Store's data-use disclosures: the extension handles authentication information (portal session credentials), website content (bid invitations and documents from the listed portals), and web activity limited to those portals (capture diagnostics). This data is not sold, is not transferred for purposes unrelated to the extension's single purpose (collecting your bids into your workspace) and is not used for creditworthiness or lending decisions. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Contact
Questions about privacy or your data? Email hello@bidtriage.com and a real person will answer.
BidTriage is operated by Facsimile, Inc. This privacy policy is effective August 1, 2026; material changes will be posted here with a new date.