Privacy & your data
BidderOps is built so your organization stays in control of its data. This page covers the self-service privacy tools and where to find the legal documents behind them.
Legal documents
The full texts live on the main site at bidderops.com/legal :
| Document | What it covers |
|---|---|
| Terms of Service | Your organization owns its content; we keep it confidential, never sell it, and never use it to train AI models. |
| Privacy Policy | What personal data is collected, the GDPR legal bases, retention, and your rights. |
| Data Processing Addendum | Our Article 28 GDPR commitments as your processor. It applies automatically; no signature needed. |
| Subprocessors | The companies that help run the service, and where they operate. |
| Cookie Policy | Only strictly necessary cookies. No trackers, so no consent banner. |
When you sign up with email you tick a box to accept the Terms; the version and time are stored with your account and included in your data export.
Download your data
Open Profile → Privacy & your data → Download my data. You get a JSON file with:
- your account details (email, sign-in providers, when you accepted the Terms)
- your profile and organization memberships, with roles
- notification preferences and per-opportunity overrides
- your assistant conversations
- notes, go/no-go decisions and activity you authored, in organizations you still belong to
- any personnel (CV) record linked to your account
- your AI feature usage and background jobs
- AI assistants connected through MCP
This covers your GDPR rights of access and portability. Organization-wide exports (for example the Experience library) stay with the organization’s own export tools.
Delete your account
Open Profile → Privacy & your data → Delete my account and type your email to confirm. Deletion is immediate and permanent.
| Deleted | Kept by the organization |
|---|---|
| Login, profile and photo | Opportunities, documents and notes you created (your name is removed) |
| Organization memberships | Go/no-go decisions and outcomes (author removed) |
| Assistant conversations | The activity log (actor removed) |
| Notification settings | Personnel records, which the organization manages |
| Connected MCP assistants and their tokens | |
| AI usage history and background jobs |
When deletion is blocked
If you are the last owner of an organization, you cannot delete your account yet: the organization would be left with no one able to manage or delete it. Either make another member an owner in Settings → Team & Roles, or delete the organization in Settings → General, then try again.
CVs and other people’s data
Personnel CVs, contacts at contracting authorities, JV partner staff and people named in bid intelligence reports are personal data that your organization controls. Before uploading an expert’s CV, make sure the expert knows it will be held in BidderOps and used for bids, and remove anything sensitive the bid does not need (health details, ID numbers, date of birth, photos).
If someone asks your organization to access or erase their personnel record, edit or delete it on the Experience page.
Where AI data goes
AI features send only the data a task needs to the provider your organization chose, using your organization’s own key. For a feature-by-feature breakdown, or to keep all AI processing in-house, see Local LLM.
Contact
Privacy requests: privacy@bidderops.com