Privacy Policy
Last updated: September 20, 2026
Who this policy covers
This policy applies to three groups of people, because Bidwhisper interacts with data about people in three different ways:
- Visitors to this website — people reading these pages.
- Subscribers (customers) — companies and individuals who pay for Bidwhisper's procurement-alert digests.
- Outreach recipients — employees at companies Bidwhisper has identified as prospective customers, who may receive a cold email introducing the service before ever becoming a subscriber.
If any section below doesn't apply to you, it's there because it applies to one of the other two groups.
What data we collect, and where it comes from
Public business information (for outreach recipients and prospects)
Bidwhisper continuously scans public sources — government agency websites, procurement portals, budget documents, and public company websites — to identify (a) upcoming public-sector purchasing opportunities, and (b) companies that plausibly sell into those opportunities. For the latter, we collect publicly available business information: company name, website, publicly listed business categories, and, where published on a company's own website, general sales/business contact information (such as a listed sales email or contact form). We do not purchase or scrape data from private databases, and we do not collect information about individuals in a personal capacity — only business contact points published by the business itself.
Information you give us directly
If you reply to an outreach email, fill out a contact link on this site, or sign up as a subscriber, we collect what you send us: your name (if given), email address, and the content of your message.
Subscription and billing information
If you become a subscriber, our payment processor (Stripe) collects and stores your payment details directly — Bidwhisper does not receive or store full card numbers. We do receive and store, linked to your account: your email address, subscription plan and status, billing dates, and a Stripe-assigned customer/subscription reference ID used to keep your account and billing in sync. When you check out, Stripe also records your acceptance of our Terms of Service (which version, and when).
Information from using the service
If you're a subscriber, we keep a record of which procurement opportunities have already been sent to you (so we don't send duplicates) and when your digest emails were sent.
What we don't collect
This website does not use advertising cookies, behavioral tracking scripts, or third-party ad trackers, and we don't build a profile of your browsing behavior on this site. We use Cloudflare's privacy-preserving analytics to see basic, aggregated traffic volume (like page views and load times) — it doesn't use cookies or collect personally identifying information. Outreach and digest emails don't contain open- or click-tracking pixels.
How we use this data
- To identify relevant opportunities — matching newly discovered procurement signals against what each subscriber has told us they sell.
- To deliver the service — sending digest emails to subscribers, and processing subscription billing.
- To reach prospective customers — sending a limited number of outreach emails to publicly listed business contacts introducing the service, where we have a genuine, specific reason to believe the recipient's company would want it.
- To operate and improve the underlying matching system — including using AI models to categorize procurement opportunities and prospective vendors. AI-generated classifications are treated as provisional and are reviewed before being used to power outreach or digest content in ways that materially affect a person or company.
We do not sell personal or business data to third parties, and we do not use subscriber or prospect data for any purpose beyond operating and improving Bidwhisper.
Who we share data with
Bidwhisper is built on several third-party services that process data on our behalf as part of running the product (sub-processors). Each only receives the data it needs to do its job:
| Service | What it's used for | What it processes |
|---|---|---|
| Stripe | Payment processing & subscription billing | Payment details, billing email, subscription status, Terms of Service acceptance |
| Monday.com | Internal record-keeping of prospects, opportunities, and subscriber accounts | Business contact info, subscription/plan status, opt-out records, Terms acceptance log |
| Microsoft Outlook | Sending digest and outreach emails | Recipient email address, email content |
| Exa | Discovering public procurement signals and public business information | Public web content only — no private or submitted data is sent to this service |
| n8n (workflow automation) | Runs the automated pipelines connecting the above services | Passes data between the services above; does not independently store data beyond normal processing logs |
| Anthropic (Claude) | AI classification of procurement signals and vendor fit | Public procurement/business text content used for categorization |
We don't share data with anyone else, except: if required by law, to protect against fraud or abuse, or in connection with a sale or transfer of the business (in which case subscribers would be notified).
Your choices
If you're a subscriber
You can cancel your subscription at any time, self-serve, through the Manage subscription link (also in the site footer and in any digest email). Canceling stops future billing; you'll keep receiving digests through the end of the billing period you've already paid for, and no further charges happen after that. See our Refund & Cancellation Policy for full details, and the “Data retention” section below for how long we keep your account data afterward.
If you received an outreach email
Every outreach email includes a way to ask not to be contacted again. If you reply asking to stop, or otherwise ask us not to contact you, we mark your record "Do Not Contact" and will not send further outreach to that contact. We aim to honor these requests within a few business days, consistent with CAN-SPAM's 10-business-day requirement, and generally much faster than that in practice.
Requesting your data or its deletion
You can ask what data we hold about you or your company, or ask us to delete it, by emailing support@bidwhisper.com. We'll respond and act on reasonable requests, subject to what we're required to keep for billing, tax, or compliance record-keeping (see below).
Data retention
We keep data for as long as it's needed for the purpose it was collected for:
- Subscriber/billing records — for the life of the subscription, plus whatever period applicable tax and accounting law requires afterward.
- Terms of Service acceptance records — kept indefinitely as a compliance record of what you agreed to and when.
- Opt-out / Do Not Contact records — kept indefinitely, specifically so the opt-out itself is never lost and the contact is never re-added to outreach.
- Public prospect/opportunity records — kept while relevant to identifying procurement opportunities; stale or closed opportunities are periodically cleaned up.
Security
We rely on the security practices of the established providers listed above (Stripe, Microsoft, Monday.com) for the data they hold, and limit internal access to the data needed to operate the service. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page. Continued use of the service after a change means you accept the updated policy.
Contact
Bidwhisper
85 Swedes Flat Rd., Oroville, CA 95966
Email: support@bidwhisper.com