BidChamp holds sensitive things: your company profile, your UEI and certifications, your past performance, and the proposals you are writing to win. We treat that data the way you would. This page explains, in plain language, exactly how we protect it.
The commitments that matter most
We never sell your data
Not to advertisers, not to data brokers, not to anyone. Your data exists to run BidChamp for you, and nothing else.
We never train AI on your data
Your profile, documents, and proposals are never used to train AI models. Our AI provider (Anthropic) does not train on the data we send either.
Encrypted in transit and at rest
All data is encrypted in transit (HTTPS/TLS) and encrypted at rest on our servers.
Hosted in the United States
Your data lives on secure US-based cloud infrastructure (DigitalOcean), not scattered across unknown servers.
How your data is protected
- In transit: every connection to BidChamp uses HTTPS/TLS encryption, so data cannot be read while moving between your browser and our servers.
- At rest: sensitive data stored in our database is encrypted on disk.
- Passwords: we never store your password in readable form. It is hashed with bcrypt, a one-way algorithm, so even we cannot see it.
- Payments: we do not store your full card number. Card details are handled by our PCI-DSS compliant payment processor; we only keep the last 4 digits for your reference.
- Access controls: access to customer data is limited to a need-to-know basis and used only to operate and support the Service.
- Protection and monitoring: rate limiting and DDoS protection guard against abuse, and we keep dependencies patched with regular security reviews.
- Backups: your data is backed up regularly so it can be recovered in the event of a failure.
How AI uses your data
BidChamp uses AI (the Claude API from Anthropic, Inc.) to score opportunities, extract requirements, and draft proposal content. When you use these features:
- The text you provide is sent to Anthropic only to generate your result, then returned to you.
- Anthropic does not use that data to train its models, per our agreement.
- We do not use your account data to train any AI models.
- AI-generated results are saved in your account for your reference and are yours.
Trusted infrastructure
Your data is hosted on secure, US-based enterprise cloud infrastructure with encryption at rest. Any vendor involved in running BidChamp receives only the data it needs to do its job and is bound by confidentiality and data-protection obligations. We do not add vendors casually.
You stay in control
- Export: you can request a copy of your data in a portable format (CSV/JSON) at any time.
- Deletion: you can ask us to delete your account and associated data. Email us and we will delete it within 30 days, subject to any legal retention we are required to keep (such as tax records).
- Correction: you can update or correct your profile data yourself, or ask us to.
To make any of these requests, reach us through our contact page.
Information you should not upload
BidChamp is not currently authorized to store or process classified information or Controlled Unclassified Information (CUI). CUI is government information that must be safeguarded even though it is not classified as secret, such as certain contract data, technical specifications, or personal information marked "CUI" or covered by ITAR/export-control rules. Please do not upload material that carries CUI, ITAR, or classified handling requirements. This keeps your obligations and ours clear while we continue to expand our compliance program.
If something goes wrong
No system is perfectly secure, and we will never pretend otherwise. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law, and tell you what happened and what we are doing about it.
Where we are headed
We are continually strengthening our security program as we grow, including formal third-party assessments as our customers require them. If your organization has specific security requirements or questions, we are happy to talk them through.
Contact us
For any security or data-protection question, or to make a privacy request, reach the BidChamp team through our contact page. Messages go straight to our team and we will respond promptly.