Privacy & security.

Your bids are yours. We use them for one thing: to read the figures and build the bid letter and the package you send. We never sell them, share them, or use them for anything else.

Encrypted everywhere. Every connection is HTTPS (TLS). Every uploaded file — the bid, a production-service bid, a calendar, an agency spec — is sealed with AES-256 before it is stored, so a copy of the database or a backup holds only ciphertext.

Restricted access. Nobody reads your bids in the course of running the service: there is no staff screen that opens them. One tool, available to the founder alone, can open a bid to check how the reading rules handled it — it exists to make the reading better, never to share or act on your figures. Passwords are hashed; we cannot read them.

No AI training. Bids are read through Anthropic’s Claude API under its commercial terms, which rule out training on customer data and limit how long Anthropic keeps a request. Each request carries the document and the fields to find — not your account, not other bids.

Isolated accounts. A bid is served only to the account that uploaded it, the staff that account invited, and a collaborator assigned to that one project. No other user can see it, and no page lists another company’s bids.

You control access and data. Remove a staff member and they see nothing from that moment. Remove a project collaborator and they lose every write, keeping a read-only view of that one project. Delete a bid from your dashboard and its files go with it; to close your account, write to us. Deleted data leaves our backups within 14 days.

Sending and signing. The package your agency receives is assembled in memory at send time and attached to the email; we never store the merged package. The signing link is a single-use token tied to one letter. The moment the agency signs, the letter locks and every collaborator’s write access on that project ends, in the same transaction.

Watched around the clock. A health check runs against the live site every ten minutes. Any failed upload or letter alerts the founder by email, with a reference code you can quote to us.

No tracking. No advertising cookies, no trackers, no analytics. One cookie keeps you signed in.

Breach notification. We will notify you within 72 hours of any confirmed breach affecting your data.

Service providers. A small set, each bound to protect your data. AI: Anthropic (Claude API). Hosting and file storage: Vercel, United States. Database: Neon (Postgres), United States, encrypted at rest, with nightly backups whose restore is rehearsed by script. Payments: Stripe — we never see or store card details. Email: Resend. Sign-in is our own; no third party handles it.

California privacy rights. California residents can ask for access to, correction of, or deletion of their personal information. We never sell or share it for advertising. Write to us to make a request.