Security
Plain description of how BidWriter Pro handles your information and your customers' payments. Questions to support@getbidwriterpro.com.
Money
We never see or store card numbers. Every card payment happens on a page hosted by Stripe, a payment processor used by millions of businesses. Card details go from your customer's browser to Stripe and never touch our servers.
Money goes to the contractor, not to us. Deposits and balances are paid into the contractor's own Stripe account and paid out to their bank. BidWriter Pro takes its fee at the moment of payment and does not hold customer funds.
Stripe verifies contractors. Before a contractor can receive card payments, Stripe checks their identity and bank account, the same way it does for any business.
Sign-in
Passwords are handled by Clerk, a dedicated sign-in service. Passwords are hashed with industry-standard algorithms; we cannot read them. Google sign-in uses Google's own login and shares only your name, email, and profile picture with us.
You can review active sessions, change your password, and remove connected accounts from Profile, "Login and security."
Your data
Encrypted in transit and at rest. Every connection uses HTTPS. The database (Supabase, on Amazon Web Services in the United States) encrypts stored data at rest.
The database is not reachable from the browser. Photos are the exception: they are stored at unlisted public addresses so they can show on the proposal. All reads and writes go through our server, which checks who you are on every request. Row-level security is on, so even a leaked public key could not read another account's data.
Proposal links are unguessable. Each signing link contains a random ID. Only someone with the link can open the proposal. Signing and pay pages are excluded from search engines.
Rate limits protect the free try-it page, signing, and payment endpoints from abuse.
Emails come from getbidwriterpro.com and are authenticated, so inboxes can verify they came from us and not from someone pretending to. Emails to your customers go out under your company name and reply to you.
What we keep and for how long
Proposals, signatures, and payment records are kept for as long as your account exists, because they are your business records. Download all your bids as a spreadsheet from Profile at any time. To close your account and have your data deleted, email support@getbidwriterpro.com from the address on the account.
Reporting a problem
If you find a security issue, email support@getbidwriterpro.com with "Security" in the subject. We will respond within two business days and will not take action against good-faith reports.
BidWriter Pro LLC
5900 Balcones Drive, Suite 27439, Austin, TX 78731