Privacy Policy

1. Scope

This policy applies to BidNorm's website, web application and related support. It does not cover a customer organization's independent practices or third-party sites linked from the service.

2. Information we collect

• Account information: name, email address, profile image, login provider identifier, organization membership and role.
• Procurement workspace information: project, supplier, quote, purchase-order and reconciliation data, along with documents and other content an organization chooses to upload.
• Service and security information: session data, device and browser details, IP address, timestamps, diagnostic events and audit records needed to run, secure and troubleshoot the service.
• Support communications: information included when someone contacts us for help or submits feedback.

3. How we use information

We use information to:

• authenticate users and maintain secure sessions;
• provide organization-scoped procurement workflows and preserve decision history;
• process documents and produce requested comparisons, exports and records;
• protect the service, investigate abuse and diagnose reliability problems;
• respond to support requests and communicate material service changes; and
• meet legal obligations and enforce our terms.

BidNorm does not sell personal information or use procurement documents for targeted advertising. We do not pool one customer's private content with another customer's workspace.

4. Authentication providers

If you choose Google or Facebook sign-in, that provider sends BidNorm the basic profile information shown on its consent screen, such as your name, email address, profile image and provider account identifier. BidNorm uses that information only to create or match your account and authenticate you. BidNorm does not request permission to post to social networks and does not retain provider access tokens for unrelated use.

5. When we share information

We may share information only as needed with:

• authorized members of the same customer organization, according to their assigned access;
• infrastructure, authentication, hosting, workflow and document-processing providers acting for BidNorm under service agreements;
• authorities or other parties when reasonably necessary to comply with law, protect people, investigate fraud or defend legal rights; and
• a successor in a merger, financing, acquisition or sale, subject to appropriate confidentiality protections.

6. Retention

We retain account and workspace information while the relevant account or organization uses BidNorm and as reasonably necessary for security, audit, dispute-resolution and legal purposes. Procurement records controlled by an organization may remain in its workspace after an individual user leaves. Backup copies are removed through normal backup-retention cycles or isolated from active use until deletion.

7. Security

We use administrative, technical and organizational safeguards designed to protect information, including encrypted network connections, access controls, tenant-scoped authorization and security logging. No online service can guarantee absolute security.

8. Your choices and deletion

You may ask to access, correct or delete personal information by emailing hello@bidnorm.ai. We may need to verify your identity and coordinate with your organization's administrator. See our Data Deletion Instructions for the request process. You may also disconnect Google or Facebook from the provider's account settings, but disconnecting a provider does not by itself delete BidNorm records.

9. Children

BidNorm is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes and contact

We may update this policy as the service changes. We will update the date above and provide additional notice when required. Questions may be sent to hello@bidnorm.ai.