← Back

Privacy Policy

Last updated: June 18, 2026

This Privacy Policy describes how BidPainter ("we", operated by 120 Dreams LLC) collects, uses, and shares information when you use our service.

Information We Collect

Account information: your name, email address, password (hashed), business name, business address, business phone number, owner name, license number, insurance information, and logo.

Customer information you upload: names, phone numbers, email addresses, project addresses, and notes for the customers you create estimates for.

Project content: photos of job sites, voice recordings you capture while walking through a job, and the transcripts and AI-generated estimate text derived from them.

Payment information: subscription status, plan tier, and billing history. Card numbers and bank details are collected and processed directly by Stripe; we never see or store them.

Usage data: device type, browser, IP address, pages visited, and basic analytics events (sign-ups, estimates created, links shared) so we can improve the product.

How We Use Your Information

To operate and improve BidPainter, generate AI-powered estimates from your photos and voice notes, deliver estimates to your customers via shareable links, process subscription and deposit payments through Stripe, send transactional email (estimate delivery, receipts, password resets), provide customer support, detect fraud and abuse, and comply with legal obligations.

How We Store Your Data

Your data is hosted on Supabase (PostgreSQL database and object storage), which runs on infrastructure secured with encryption in transit (TLS) and at rest. Photos and audio files are stored in Supabase Storage with access scoped to your account. Authentication uses Supabase Auth.

Third-Party Services We Share Data With

We share the minimum data necessary to operate the service:

Supabase — database, authentication, and file storage (all account and project data)
Stripe — subscription billing and deposit collection (email, business name, payment method, transaction data; processed under Stripe's privacy policy)
Anthropic — AI processing of photos and voice transcripts to generate estimate text (project content sent at the moment of generation; Anthropic does not train on this data)
Lovable — application hosting and deployment infrastructure
Resend — transactional email delivery (recipient email and message contents)

We do not sell your personal information. We do not share your data with advertisers.

Data Retention

We retain your data while your account is active. After you close your account, we delete or anonymize your personal data within 90 days, except where retention is required by law (for example, tax records related to payments).

Your Rights

You may access, correct, export, or delete your data at any time from Settings, or by emailing hello@120dreams.com. Depending on your location, you may have additional rights under laws like the GDPR or CCPA, including the right to object to processing, request a copy of your data, or lodge a complaint with a regulator.

Children

BidPainter is intended for business use by adults (18+). We do not knowingly collect data from children.

Changes to This Policy

We will notify you of material changes by email or in-app notice. The "Last updated" date at the top of this page reflects the current version.

Contact

Questions, requests, or concerns? Email hello@120dreams.com.