Privacy Policy

We collect information you provide directly: name, email, phone number, business details, and profile information. We also collect data automatically including IP address, device information, browser type, usage patterns, and location data (city/province level) through cookies and similar technologies. We use your approximate IP-derived location (city and province) to surface nearby job listings at the top of your homepage feed; this estimate is approximate and is not linked to precise GPS coordinates.

We use your information to: provide and maintain the platform, match customers with businesses, facilitate communication once a lead is unlocked, process one-time lead unlock purchases, generate AI-assisted Match Scores and rewrite suggestions, send notifications about jobs and bids, confirm email ownership via one-time codes, prevent fraud and abuse, comply with legal obligations, and improve our services. We never sell your personal data to third parties.

Your data is stored on secure cloud servers located in Canada. All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Access to personal data is restricted to authorized personnel with a legitimate business need. We retain data for as long as your account is active or as required by law.

We implement industry-standard security measures including: JWT-based authentication, optional two-factor authentication (2FA), encryption of sensitive data, regular security audits, DDoS protection, spam and fraud detection systems, audit logging, secure file upload handling, and vulnerability monitoring. Despite these measures, no system is 100% secure.

We use cookies for essential functionality (authentication, session management), functional purposes (preferences, saved searches), analytics (understanding usage patterns), and marketing (relevant advertisements). You can manage cookie preferences through our Cookie Policy page or your browser settings. See our Cookie Policy for details.

Under PIPEDA and applicable provincial privacy laws, you have the right to: access your personal data, request corrections, request deletion of your data, withdraw consent for data processing, download a copy of your data, and lodge a complaint with the Privacy Commissioner of Canada. To exercise these rights, contact privacy@bidneeds.ca.

You may delete your account at any time through your profile settings. Account deletion permanently removes your personal data, listings, messages, and reviews. Some data may be retained for legal, accounting, or fraud prevention purposes as required by Canadian law. Deletion is irreversible.

We use your data to detect and prevent fraud, scams, fake accounts, and suspicious activity. This includes automated fraud detection systems, identity verification processes, and manual review by our trust and safety team. We may share information with law enforcement agencies when required by law or to protect our users.

We may disclose your personal information when required by law, court order, or government regulation, or to protect the rights, property, or safety of BidNeeds, our users, or others. This includes cooperation with Canadian law enforcement agencies for investigations of fraud, harassment, identity theft, or other criminal activity.

In addition to PIPEDA, we comply with applicable provincial privacy regulations including Quebec's Law 25, British Columbia's PIPA, and Alberta's PIPA. Users in these provinces have additional rights regarding consent, data portability, and privacy impact assessments.

Our mobile applications comply with Apple Privacy requirements and Google Data Safety standards. We clearly disclose data collection practices in the App Store privacy labels and Google Play Data Safety section. We do not track users across other apps or websites for advertising purposes.

We use trusted third-party services including Stripe (payment processing), cloud hosting providers, and analytics tools. These providers have their own privacy policies and are bound by data processing agreements. They only access data necessary to provide their services and cannot use it for other purposes.