Privacy Policy
Last updated September 22, 2026. This explains what BranchBids collects, why, and what you can ask us to do with it.
What we collect
- Account details: your email address, your company name, and your password (stored only as a one-way scrypt hash).
- Your products: product names, model numbers, categories, descriptions, and specifications you add or upload.
- Results we produce: matches between your products and public notices, and your alert settings.
- Messages you send us through the contact form, including the email you give.
- Security records: to slow down password guessing we store keyed hashes of email addresses and IP addresses with the time of failed attempts. We keep them for about a day.
- Server logs kept by our hosting provider, such as request times and IP addresses.
We don't use advertising or analytics trackers, and we don't sell or rent personal information.
Public procurement data
Buying opportunities come from public government sources, currently SAM.gov. Those notices can include the names and work contact details of government contracting officers, as published by the government.
Why we use it
- To run your account and show your matches.
- To keep the service secure and working.
- To answer your messages and, when you turn them on, send alert emails.
Cookies
We set one cookie, sba_session, which keeps you signed in for up to 14 days. It's strictly necessary and is not used for tracking.
Who processes it for us
- Vercel hosts the website and application.
- Neon hosts the database (United States).
- GitHub runs our scheduled jobs and receives contact-form messages so we can answer them.
- Cloudflare provides our domain name service and forwards email sent to @branchbids.com addresses to our inbox.
When we add payments or email delivery, the payment processor and email provider will be added here before they are used.
How long we keep it
Account, product, and match data is kept while your account is open. When you ask us to delete your account, we delete its company record, users, products, matches, and alert settings. Security records expire after about a day.
Your choices
You can ask us to access, correct, export, or delete your data at any time through the contact page or by writing to hello@branchbids.com from the email on your account.
Security
Data is encrypted in transit. Each company's data is separated both by the application and by database row-level security, and passwords are never stored in readable form. No system is perfectly secure; if we learn of a breach affecting your data, we'll tell you.
Children
BranchBids is a business service and isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date above and, for significant changes, tell account holders.