Privacy Policy

Information We Collect

A) Information you provide

• Account information: name, email address, phone number, password stored securely, role, company name, workspace settings, and user permissions.
• Business records you upload or enter: asset lists, inventory, consumables, job details, schedules, notes, documents, photos, signatures, customer and vendor contact information, invoices, estimates, billing contract records, and related workflow data.
• Billing information: plan selection, subscription status, billing address, invoices, receipts, transaction identifiers, payment status, and limited payment method details such as card brand and last four digits when provided by Stripe.
• Support and communications: messages, form submissions, feedback, and survey responses.

B) Information collected automatically

• Device and connection data: device type, operating system version, app version, browser type, IP address, approximate location derived from IP address, authentication tokens, and identifiers needed for login and session security.
• Usage data: pages and screens visited, features used, click paths, performance metrics, crash logs, audit logs, and logs needed to secure and operate the Service.
• Cookies and similar technologies: used for session management, preferences, security, and web analytics.

C) Location and media, if enabled

• Precise location: collected only if you enable location permissions on iOS or in your browser and your device provides it.
• Photos and videos: you may upload media or capture it in the app. Media may include metadata such as timestamp and, if enabled on the device, location.

How We Use Information

We use information to:

• Create, authenticate, and manage accounts and workspaces.
• Provide core InvenOps workflows such as inventory, allocations, loadouts, billing, notes, schedules, documents, and reporting.
• Process subscriptions, invoices, payments, billing communications, refunds, and cancellation requests.
• Provide support, diagnose issues, improve reliability, and maintain security.
• Generate analytics, summaries, and operational insights for the workspace.
• Prevent fraud, abuse, and security incidents.
• Comply with law and enforce agreements.
• Send service-related messages such as security, billing, and feature updates. Marketing messages are optional and can be unsubscribed.

De-Identified Data and Product Improvement

Sanitized data use. We may create de-identified, sanitized, or aggregated datasets from customer data and usage data to improve reliability, performance, analytics, forecasting, recommendations, and anomaly detection.

No public exposure. We do not use identifiable customer data in a way that would expose one customer's records to another customer.

Operational processing. Even where a choice or opt-out is available, we may still process information needed to operate, secure, bill, and support the Service.

How We Share Information

We may share information with:

• Service providers that help run the Service, including hosting, storage, email delivery, analytics, error monitoring, and customer support tools.
• Payment processors, including Stripe, to process subscriptions, invoices, refunds, taxes, card updates, and related billing activity. We do not store full card numbers.
• Integrations you enable, such as accounting or messaging tools.
• Legal and safety. If required by law, subpoena, court order, or to protect rights, safety, or prevent fraud.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell personal information in the traditional sense. If laws define "sell" or "share" broadly, such as for cross-context behavioral advertising, we will provide required notices and choices.

Data Retention

We retain information as long as needed to provide the Service, comply with legal obligations, resolve disputes, maintain security and audit logs, and enforce agreements. You may request deletion consistent with the Terms. Backups may persist for a limited period before scheduled deletion.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These safeguards include access controls, secure password handling, protected transport, audit logging, and vendor controls where applicable. No security system is perfect. You are responsible for maintaining strong passwords and controlling access to your account.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict certain personal information. You can update account information in the Service, request a copy or deletion of data subject to legal and operational limits, and opt out of marketing communications.

California notice, if applicable. California residents may have rights to know, delete, and correct certain personal information, and to opt out of certain sharing for targeted advertising. Submit requests to connect@bidpointx.com.

International Users

If you access the Service from outside the United States, your information may be processed and stored in the United States or other jurisdictions where our service providers operate.

Children

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Policy from time to time. We will update the Last Updated date and, if changes are material, provide notice in the Service or by email.

Contact Us

This page is provided for transparency and App Store review. It does not limit rights or obligations set out in the BidPointX Terms of Service or a signed customer agreement.