Privacy Policy

VantaBid Pty Ltd ("VantaBid", "we", "us") operates the VantaBid construction estimating platform. Our registered office is in New South Wales, Australia. For privacy-related enquiries contact us at privacy@vantabid.com.

We collect the following categories of data:

• Account data: name, email address, company name, and password hash when you register.
• Billing data: payment card details are handled by Stripe and are never stored on our servers. We retain billing history and subscription status.
• Project data: drawings, specification documents, and associated metadata you upload for analysis.
• Usage data: IP address, browser type, pages visited, feature interactions, and timestamps collected via server logs and analytics.
• Communications: emails, support tickets, or other messages you send to us.

We use your data to:

• Provide, operate, and improve the Service.
• Process payments and manage your subscription.
• Send transactional emails (account confirmations, invoices, password resets).
• Respond to support requests.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We share data only with:

• Service providers: Stripe (payments), MongoDB Atlas (database hosting), Google Cloud (AI processing), and Vercel (frontend hosting) — each bound by data processing agreements.
• Legal authorities: when required by law, court order, or to protect the rights and safety of VantaBid, its users, or the public.

We retain your account and project data for as long as your account is active or as needed to provide services. After account closure, data is deleted within 90 days except where retention is required by law or legitimate business purposes (e.g., billing records retained for 7 years per Australian tax law).

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. Despite these measures, no system is fully immune to breaches and we cannot guarantee absolute security.

Under applicable privacy laws (including the Australian Privacy Act 1988 and, where relevant, the GDPR) you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.

To exercise these rights, email privacy@vantabid.com. We will respond within 30 days.

VantaBid uses essential cookies for authentication and session management. We do not use third-party advertising cookies. You can disable non-essential cookies via your browser settings, though this may affect platform functionality.

We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice. The "Effective date" at the top of this page indicates when the latest revisions took effect.