Privacy policy

Last updated: July 5, 2026

Who we are

ShouldIBid is operated by Neomite Labs LLC, a California limited liability company. References to "we," "us," or "our" in this policy refer to Neomite Labs LLC. You can reach us at hello@shouldibid.ai.

What we collect

We collect the following information when you use ShouldIBid:

• Email address — used to create your account and send you a magic link to sign in. We do not collect passwords.
• Uploaded documents — RFP files, addenda, and attachments you upload to generate a briefing. These are used solely to produce your analysis.
• Vendor profile data — company name, licenses, certifications, insurance limits, bonding capacity, past performance, and contact information you choose to enter. This data is used to personalize your VIN analysis.
• Usage data — pages visited, features used, and session activity collected automatically by Vercel (our hosting provider) through first-party analytics.
• Billing information — if you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number. We store your Stripe customer ID and subscription status only.

How we use your information

• To generate your RFP briefing and VIN analysis
• To personalize analysis using your vendor profile
• To send transactional emails (magic link sign-in, briefing ready notifications) via Resend
• To manage your subscription via Stripe
• To improve the product using aggregated, anonymized usage data

What we do not do

• We do not sell your data to any third party
• We do not share your uploaded documents with agencies, other vendors, or any external party
• We do not use your documents to train AI models
• We do not share your vendor profile information with government agencies
• We do not send marketing emails without your explicit consent

Third-party services

ShouldIBid uses the following third-party services to operate:

• Anthropic — AI analysis engine that powers VIN. Your uploaded documents and vendor profile are sent to Anthropic's API to generate your briefing. Anthropic's privacy policy applies to this processing.
• Supabase — database and authentication provider. Your account data, vendor profile, and briefing data are stored in Supabase.
• Stripe — payment processor for paid subscriptions. Stripe's privacy policy applies to payment data.
• Resend — email delivery service used to send magic links and notifications.
• Vercel — hosting provider. Vercel may collect first-party analytics data including page views and performance metrics.

Data retention

Your uploaded documents and briefing data are retained for as long as your account is active. You may delete individual documents at any time from the Document Details tab. If you close your account, your data is deleted within 30 days.

Security

All uploaded documents are encrypted in transit and at rest. Access to your data is restricted to your account only. We do not share decrypted document content with any third party except as described above (Anthropic API for analysis generation).

California residents (CCPA)

If you are a California resident, you have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, contact us at hello@shouldibid.ai. We will respond within 45 days.

Children

ShouldIBid is not directed at children under 18. We do not knowingly collect personal information from anyone under 18 years of age.

Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. Continued use of ShouldIBid after changes are posted constitutes acceptance of the updated policy.

Contact

For privacy questions or requests, contact us at hello@shouldibid.ai.
Neomite Labs LLC, California.