Privacy policy
Last updated: 22 October 2026
This explains what data we keep when you use Build The Bid, why, who we share it with and for how long. We collect no more than we need and we never sell data.
1. Who is responsible
Build The Bid is a business of Tim van Heijst, based in Almansa (Albacete), Spain. We are responsible for your account data and for the visitors of this website.
Questions about privacy or a request about your data? Email support@buildthebid.com.
2. What data we keep
- Account: your email address, your password (only as an encrypted hash, never readable), your language and your settings.
- Business details you enter yourself: company name, address, phone, email, website, logo, chamber of commerce and VAT number, and IBAN.
- What you create in the app: customers, quotes, prices, jobs and planning, job photos and videos, damage reports, hours and kilometres, and the employees you add.
- Payments: your subscription, invoices and payment status. You enter card and bank details at Stripe; they never reach our servers.
- Security and technical data: sign-in attempts (your IP address only as an encrypted code, never readable), when you last used the app, and error reports without the contents of your forms.
- On the website, only with your consent: cookies of the Meta pixel (see section 8).
- If you arrive through an ad link, your browser remembers only that link's code for the visit (which ad, nothing else; no cookie, and nothing goes to Meta). If you create an account, we keep that code with it, so we know which ad works.
3. Why we use it
- To provide the service you create an account for: your quotes, jobs and invoices (performance of the contract).
- To bill your subscription and keep our books (contract and legal obligation).
- To keep the app safe and working: preventing abuse, finding errors (legitimate interest).
- To measure whether our ads work, only if you consent to it (consent, which you can withdraw at any time).
4. Your customers' data
Names, addresses and other details of your own customers that you put in quotes or jobs are yours to manage. You are responsible for that data and we only process it on your behalf, to make the app work. We never use it for anything else and never send it to Meta or other advertisers.
5. Who we share data with
- Vercel: hosting of the website and the app, and storage of files such as logos and photos (servers in Frankfurt).
- Neon: the database (servers in Frankfurt).
- Stripe: payments, invoices and VAT calculation.
- Google Workspace: sending email, such as confirming your email address and resetting your password.
- Meta (Facebook/Instagram): only if you accept cookies. The Meta pixel then measures visits to the website, and we tell Meta when you create an account, start a trial or pay. We send your email address and account ID only encrypted (as a hash), so Meta can see whether someone came through an ad, plus the amount of a payment.
- Moneybird, Rompslomp or SnelStart: only if you connect your accounting software yourself, and only the invoices you send there.
- We share nothing else, unless the law requires us to.
6. Data outside the European Union
Your data is stored on servers in the EU. Some of the parties above are US companies. Where data may leave the EU, this happens under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. How long we keep data
- Your account and everything you create in the app: as long as your account exists. After your subscription ends you can still view everything (read-only) until you ask for deletion.
- Job photos and videos: 24 months after upload; you get three warnings beforehand to save them.
- Sign-in attempts and error reports: 90 days.
- Invoices and payments: as long as tax law requires, also after your account is deleted.
- After a deletion request: gone within 30 days, except for invoices.
9. Your rights
You may see, correct or delete your data, restrict its processing, object, receive your data in a common file format and withdraw your consent. Email support@buildthebid.com; you get an answer within a month.
If you disagree with how we handle your data, you can complain to the Spanish supervisory authority (Agencia Española de Protección de Datos, aepd.es) or to the one in your own country.
10. Having your data deleted
Send an email from your account's email address to support@buildthebid.com with the subject ‘Delete my account’. We confirm your request and delete your account and everything you created in the app within 30 days. We keep invoices as long as the law requires.
If you only visited the website or shared data with Meta through the cookies: choose ‘Decline’ in ‘Cookie settings’. What Meta itself keeps about you is managed in your Facebook or Instagram settings under ‘Off-Meta activity’.
Cancelling a subscription does not delete your data by itself, so you can pick up where you left off later. If you want everything gone, ask as described above.
11. Security
All connections are encrypted (https), passwords are stored only as a hash, files sit in protected storage and can only be reached through your own sign-in. Every account sees only its own data.
12. Changes
If we change this policy, the date at the top changes. For important changes we tell you in advance by email or in the app.