Privacy Policy

Effective date: August 17, 2025
Who we are: NoCoBids ("NoCoBids," "we," "us," or "our")
Website: https://www.nocobids.com
Contact: privacy@nocobids.com

This Privacy Policy explains how we collect, use, disclose, and protect information related to our website and services (the "Services"). We operate a local business directory and (for signed-in users) a request-for-bids workflow. We aim for minimal data collection and do not sell your personal information.

1) What we collect

A. Information you provide

Account details (for contractors or homeowners using the bid system): name, email, phone, password (hashed), business info.
Business directory submissions: business/individual name, website, email, phone, service categories, and similar content you choose to publish.
Communications: messages you send to us (support requests, feedback), and content posted in forms.

B. Information we collect automatically

Basic usage & device data: IP address, browser type, pages viewed, timestamps, referrer/UTM (standard server and CDN logs).
Cookies or local storage (if enabled): used for essential features (session/auth) and basic analytics. We don't use cross-site tracking ads.

C. Information from third parties

Public sources: We may include publicly available or owner-submitted business contact details in the directory (e.g., business name, website, email, phone).
Service providers (processors) may return limited metadata (e.g., payment confirmation from Stripe, deliverability status from email/SMS providers).

2) How we use information

We use information to:

• Provide and improve the directory (list businesses by category and region);
• Operate the request-for-bids workflow for registered users;
• Communicate with you (account notices, service updates);
• Prevent abuse, secure our Services, and comply with law;
• Produce aggregate, non-identifiable insights (e.g., number of businesses in a category).

We do not sell personal information, and we do not use it for cross-context behavioral advertising.

3) What we show publicly

Our directory intentionally displays business/individual name, website, email, and business phone for service providers, organized by category and location. If you are listed and want edits or removal, see Section 10 – Your rights.

4) Legal bases (EEA/UK visitors)

Where GDPR applies, we process personal data under these bases: Contract (to provide Services), Legitimate Interests (security, directory operations, minimal analytics), Consent (where required, e.g., certain cookies), and Legal Obligation.

5) Sharing information

We share information only with:

Service providers (processors) who help us run the Services (hosting, database, email/SMS, payments, error monitoring). Examples may include:

• Hosting/CDN/Deployment: Vercel (and/or Cloudflare)
• Database/Auth/Storage: Supabase
• Payments (if purchasing credits, etc.): Stripe
• Email/SMS (if used): Postmark/SendGrid, Twilio
• Analytics/Logs (if used): privacy-respecting analytics and server logs

These providers are contractually bound to process data on our instructions.

• Legal and safety: if required by law or to protect our rights, users, or the public.
• Business transfers: in a merger, acquisition, or sale of assets, subject to this Policy's commitments.

We do not sell personal information. We do not share it for cross-context behavioral advertising.

6) Cookies and analytics

Essential cookies support login sessions and security.
Analytics (if used) are limited, privacy-respecting, and do not profile you across other sites.
You can set your browser to refuse non-essential cookies. Essential cookies may be required for the site to function.

7) Data retention

Accounts and bid workflow: kept while your account is active. If you close your account, we delete or de-identify personal data within a reasonable period, except where we must retain it for legal, security, or audit reasons.
Directory entries: business contact details may be retained and displayed as part of the public directory. On verified request from the business owner or their authorized agent, we will correct or remove information we control (see Section 10).

8) Security

We use reasonable technical and organizational measures (encryption in transit, hashed passwords, role-based access, least-privilege for admin tools). No system is 100% secure; please use unique, strong passwords and keep your account credentials safe.

9) Children's privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will delete it.

10) Your privacy choices and rights

A. Access, correction, deletion

You may request access to, correction of, or deletion of your personal information by emailing privacy@nocobids.com. If you maintain a public business listing, you may request changes or removal of information we control in the directory.

B. Colorado Privacy Act (and similar U.S. state laws)

Residents of Colorado (and, where applicable, California, Virginia, Connecticut, Utah) may have the right to:

• Know/access the personal information we process about you;
• Correct inaccuracies;
• Delete personal information;
• Portability (obtain a copy in a portable format);
• Opt out of the sale of personal information (we do not sell), targeted advertising (we do not do this), and certain profiling.

To exercise these rights, contact privacy@nocobids.com with "Privacy Request" in the subject. We may need to verify your identity and state of residence. You may use an authorized agent where permitted by law.

C. Email and SMS

If we send operational or marketing messages, you can opt out via the link in the message or by contacting us. Operational/transactional messages (e.g., account, security) may still be sent.

D. Do Not Track

We do not respond to browser "Do Not Track" signals. We avoid cross-site ad tracking by design.

11) International transfers

If you access our Services from outside the United States, your information may be processed in the U.S. by us or our service providers. We use appropriate safeguards where required by law.

12) Third-party links

Our site may link to third-party websites. Their privacy practices are governed by their own policies.

13) Changes to this Policy

If we make material changes, we'll update the "Effective date" and, where appropriate, notify you (e.g., via the site or email). Continued use of the Services after changes means you accept the updated Policy.

14) Contact us

Questions or requests? Email: privacy@nocobids.com