Privacy Policy

Account information. Name, email address, company details, and credentials (passwords are stored as salted hashes by our authentication provider; API keys are stored as hashes).

Business data you enter. Price books, quotes, jobs, invoices, photos, notes, and the customer contact information contractors add or collect through their public lead forms, quote acceptances, and e-signatures.

Billing information. Payments for BidTorch subscriptions are processed by Stripe. We never see or store card numbers — we store only subscription status and Stripe identifiers.

Usage and log data. Standard server logs (IP address, browser type, pages requested) used for security and operations. We use session cookies for sign-in only — no advertising trackers.

If you are a homeowner or business whose information was entered into BidTorch by a contractor — for example, you filled out their lead form, accepted a quote, or signed an estimate — that contractor is responsible for the relationship with you. We process that information on the contractor’s behalf to provide the service. To access, correct, or delete it, contact the contractor; we will assist them in honoring your request, and you can also reach us directly at nick.hochstedler@hossautomation.com.

To provide and secure the service, process subscriptions, send transactional email (account confirmation, quotes and invoices a contractor chooses to send), respond to support requests, and improve the product. We do not sell personal information, and we do not use Customer Data for advertising.

We share data only with the providers that run the service:

• Supabase — database, authentication, and file storage (hosted on AWS, United States)
• Vercel — application hosting
• Stripe — subscription billing and, when a contractor connects their own Stripe account, their customer payment links
• Resend — transactional email
• Zapier / Make / webhook endpoints — only when a contractor connects them, and only the event data those connections subscribe to

We may also disclose information when required by law or to protect the rights, safety, or property of BidTorch or others.

We keep data while an account is active. Contractors can export their data (CSV) and delete records in the app at any time. After an account closes, its public quote, invoice, and lead-form links are disabled, and we delete Customer Data following a reasonable wind-down period (at least 30 days), retaining only what law or accounting requires.

Data is encrypted in transit (TLS) and at rest. Access is scoped by row-level security so each organization can only reach its own data. Credentials and API keys are stored hashed. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

Account holders can access and correct their information in the app, export their data from Settings, and close their account by contacting us. Depending on where you live, you may have additional rights (such as access or deletion requests) — email nick.hochstedler@hossautomation.com and we will respond within a reasonable time.

BidTorch is a business tool, not directed to children. Account holders must be at least 18, and we do not knowingly collect information from anyone under 13.

We may update this policy; material changes will be announced by email or in the app before they take effect. The date at the top reflects the latest revision.

Hoss Automation LLC (BidTorch) · Greenfield, Indiana · nick.hochstedler@hossautomation.com