Trust
Subprocessors
Bid Intelligence uses the third-party service providers ("subprocessors") below to operate the Service. Each is bound by contract to appropriate confidentiality and data-protection obligations and processes data only to provide its function.
| Subprocessor | Function | Data processed | Region |
|---|---|---|---|
| Supabase | Managed Postgres database, authentication, storage, and serverless (Edge) functions | Account data (emails, names, roles), waitlist requests, firm bid/business data, audit logs | United States |
| Vercel | Website & application hosting and content delivery | Static assets and request/access logs (no customer database content stored at Vercel) | United States / global edge |
| GitHub (GitHub Actions) | Source control and the nightly data-ingest pipeline (CI/CD) | Application source code and build/pipeline logs; processes public state-DOT data (no customer personal data) | United States |
| Cloudflare | Edge network in front of our backend (DDoS protection, request routing) | Standard request metadata, including IP address used for anti-abuse rate limiting | Global edge |
| Google Fonts | Web-font delivery | Standard HTTP request metadata for font files (no account data) | Global edge |
| PostHog | Product analytics for the signed-in application (feature-usage measurement) | Anonymous usage events keyed to internal account identifiers (UUIDs); no names, emails, or session recordings | United States |
| Resend | Transactional email delivery (account invitations, service notifications, letting alerts) | Recipient email addresses and message content for service emails | United States |
Payment processing
When paid billing launches, we expect to use a PCI-DSS-compliant payment processor (e.g., Stripe), which would process billing contact and payment details directly. Card data would be handled by the processor, not stored by us. This page will be updated when billing goes live.
Changes
We may add or replace subprocessors as the Service evolves. Material changes to this list will be reflected here, and customers under a written agreement will be notified as required by that agreement. Questions: privacy@bidintel.co.