BidLens — Privacy Policy

Effective date: August 22, 2026 · Controller: BidLens is operated by Youssef Boumanzah (sole proprietor / auto-entrepreneur), SIREN 988 390 274, 5 rue des Sainfoins, 94170 Le Perreux-sur-Marne, France ·

Contact: support@getbidlens.com

1. Who this policy covers

• Pros — contractors and home-service professionals who create a BidLens

account.

• Customers — people who receive an estimate or invoice link from a Pro and

open, sign or pay it. If you are a Customer, the Pro who sent you the link is

the business you are dealing with; BidLens processes your information on that

Pro's behalf to deliver, record and follow up on that estimate or invoice.

2. What we collect

From Pros (when you sign up and use the app)

• Account: name, email address, sign-in provider (Apple, Google or email), a

Clerk user ID. We never see your password.

• Business profile: business name, logo, phone, address/ZIP, trade, team size,

default hourly rate, markup, tax rate, how you quote today (onboarding

answers).

• Job content: photos you take or upload, notes, ZIP code of the job, the

estimates, line items, invoices and reminders you create.

• Subscription status: product, trial/renewal dates, from RevenueCat and the app

stores. We do not receive your card number.

• Device and usage data: app version, OS, device model, language, crash

reports, screens used and actions taken (via PostHog), a random installation

ID, push-notification token if you allow notifications.

• Advertising data (only if you allow tracking on iOS or Android): advertising

identifier and install/conversion events shared with Meta (Facebook) to

measure our ads. You can refuse this in the system prompt; the app works the

same.

About Customers (entered by the Pro or captured when you open a link)

• Contact details the Pro entered: name, phone number, email, job address.
• Photos of the job site taken by the Pro (may show the inside or outside of

your property; should not show people).

• When you open a link: time opened, IP address, browser/device type.
• When you sign: the name you typed, your drawn signature, date and time, IP

address, browser/device information, a fingerprint (hash) of the document you

signed, and the email address where the copy is sent.

• Invoice status (sent, viewed, paid) as marked by the Pro.

We do not collect precise location, contacts, health, financial account or

biometric data. A drawn signature is used as a picture only; we do not analyse it

biometrically.

3. Why we use it (and the legal basis where one is required)

• To provide the service: generate draft estimates from photos and notes (your

photos and notes are sent to a third-party AI model provider under contract;

see §4), store and display your estimates, send links, emails and reminders,

record signatures, create PDFs.

• To run your subscription (store receipts, RevenueCat).
• To understand and improve the app (aggregated analytics, crash reports).
• To measure our advertising (only with your tracking permission).
• To keep the service secure, prevent abuse, and comply with law.

We do not sell personal information, and we do not use job photos or

customer data to train AI models or for advertising.

4. Who we share it with (processors)

| Provider | What for | Data |

|---|---|---|

| Clerk | sign-in | name, email, provider ID |

| Google (Gemini, via OpenRouter) and Anthropic | AI estimate drafting | photos, notes, ZIP, trade (no customer name or contact) |

| Hetzner (Germany) | hosting, database, photo storage | all service data |

| Resend | transactional email (estimate links, signed copies, invoice reminders) | customer email, Pro name, document |

| RevenueCat + Apple App Store / Google Play | subscriptions | store identifiers, purchase status |

| PostHog | product analytics | device/usage data, anonymous IDs |

| Meta (Facebook) | ad measurement, only if you allow tracking | advertising ID, install/trial/purchase events |

| Expo / Apple / Google push services | notifications | push token |

We may also disclose data when the law requires it or to protect rights and

safety. If BidLens is acquired, data transfers with the business under the same

commitments.

5. Where data is stored and international transfers

Our servers are currently in the European Union (Germany). Some providers

process data in the United States. [Hypothesis — confirm the final hosting

decision with the dev team.]

6. How long we keep it

• Pro account data and job content: while your account is active, then deleted

within 90 days after you delete your account (backups purged within [30]

further days). PDFs of signed estimates and invoices you already sent to

customers remain available to those customers for [the retention period the

Pro chooses / 7 years — to decide] because they are business records of the

Pro.

• Signature audit trail (name, IP, time, hash): kept with the signed document.
• Analytics: 24 months. Logs: 30–90 days.
• Photos sent to the AI provider: not retained by the provider beyond processing

[verify each provider's data-retention terms].

7. Your choices and rights

• Pros: view and edit your profile in Settings; export your estimates and

invoices as PDF; delete your account in Settings → Account → Delete account (or

email support@getbidlens.com); turn off notifications in system settings; refuse

ad tracking in the system prompt or later in your phone's settings; unsubscribe

from our own marketing emails with the link in each email.

• Customers: to access, correct or delete information a Pro holds about you,

contact that Pro first (their details are on every estimate). You can also email

support@getbidlens.com and we will help and relay the request. You can opt out of

reminder emails with the link in each email (the Pro may still contact you

directly about an unpaid invoice).

• U.S. state privacy laws (California, Colorado, Connecticut, Texas, Virginia

and others): where those laws apply to us, you have the right to know, access,

correct, delete and to opt out of sale/sharing and targeted advertising; we do

not sell or share personal information for cross-context behavioral advertising

except the optional ad-measurement events described above. Contact

support@getbidlens.com; we respond within 45 days and do not discriminate for

exercising rights.

• EU/UK users (if any): GDPR rights apply; contact support@getbidlens.com.

8. Children

BidLens is for business use by adults (18+). We do not knowingly collect

information from children under 13. If you believe a child has given us

information, email support@getbidlens.com and we will delete it.

9. Security

Data is encrypted in transit (TLS) and at rest on our servers; access is limited

to staff and processors who need it. No system is perfectly secure; please keep

your device and account credentials safe.

10. Changes

We will post changes here and, for material changes, notify Pros in the app or by

email before they take effect.

11. Contact

support@getbidlens.com