Village Handyman Plus ("BidReady," "we," "us") operates BidReady, a suite of software tools for government contractors. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it.
Account information: name, email, company name, password (hashed — we never see it in plaintext; authentication is handled by Supabase Auth).
Company profile data you provide: UEI, CAGE code, certifications, NAICS codes, target states, bonding limits, and similar business profile fields you enter to use the tools.
Business content you create in BidReady: opportunity records, vendor and teaming partner contacts, capture plans, subcontractor compliance records, teaming agreement drafts, capability statements, and any documents or notes you upload or generate.
Payment information: processed and stored entirely by Stripe. We do not store your card number or full payment details on our servers — we retain only subscription status, plan, and billing dates needed to manage your account.
Usage data: basic technical logs (IP address, browser type, pages/tools accessed) for security and troubleshooting. We also use Vercel Web Analytics, a cookie-free service, to count page visits and see which sites or links visitors arrived from; it does not identify you personally. If you arrive through one of our tracked links (for example, from a BidReady video) and then create an account, we record that link's source on your account so we know which channels bring new customers.
We do not sell your data. We do not share Customer Data with third parties for their own marketing purposes.
We rely on the following subprocessors to operate BidReady. Each only receives the data necessary to perform its function:
| Provider | Purpose | Data Involved |
|---|---|---|
| Supabase | Database, authentication, file storage | Account info, all Customer Data you enter |
| Stripe | Payment processing, subscription billing | Billing info, email, subscription status |
| Anthropic (Claude API) | AI-generated drafts and analysis | Content you submit for AI processing (opportunity details, company profile context, documents you attach) |
| Resend | Transactional and product emails | Name, email address |
| Vercel | Application hosting | Standard technical/request logs |
We choose subprocessors that maintain industry-standard security practices. If we add or change a subprocessor in a way that materially affects how your data is handled, we'll notify you.
Some features (proposal drafting, capability statement generation, teaming agreement drafting, intel analysis) send data you provide to a third-party AI model to generate output. Do not submit information you're not authorized to share (e.g., another company's confidential data) into these features. We do not permit our AI subprocessor to use your data to train their models beyond what's necessary to provide the response to you, per their standard API terms.
We retain Customer Data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days in case you reactivate, after which it may be permanently deleted upon request or as part of routine data hygiene. You can request earlier deletion by contacting support@govready.co.
Depending on your location, you may have the right to:
To exercise any of these rights, contact support@govready.co. We'll respond within 30 days. We will not discriminate against you for exercising any of these rights.
U.S. state privacy rights. Residents of California, Virginia, Colorado, Connecticut, Utah, Texas and other states with comprehensive privacy laws may have additional rights, including the right to know the categories of personal information collected, the right to correction and deletion, and the right to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information, and we do not use it for targeted advertising or profiling. To exercise any state privacy right, or to appeal a decision we make on such a request, contact support@govready.co.
We use industry-standard safeguards including encrypted data storage (via Supabase, with row-level security scoping all data to your account), encrypted connections (HTTPS/TLS), and access controls limiting who can view Customer Data. No system is 100% secure, and we can't guarantee absolute security, but we take reasonable steps to protect your information.
We use essential cookies/local storage required for login sessions and app functionality. We do not currently use third-party advertising or tracking cookies.
BidReady is a business tool intended for use by adults in a professional capacity. We do not knowingly collect data from anyone under 18.
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice before taking effect.
If we become aware of a security incident that compromises the confidentiality or integrity of your personal data or Customer Data, we will notify affected customers without undue delay, and in any event within 72 hours of confirming the incident, by email to the address on your account. Our notice will describe what happened, the data involved as far as we know it at the time, the steps we are taking, and what we recommend you do.
BidReady and its subprocessors process and store data in the United States. If you access BidReady from outside the United States, you are transferring your data to the United States, where privacy laws may differ from those in your jurisdiction.
Questions about this policy, or to exercise a data right:
support@govready.co
Village Handyman Plus
Bronx, New York