Privacy policy

This policy explains how Operosus Ltd (Bidwell) collects, uses and protects your information when you visit this site, sign up for a trial, or use the Bidwell platform. We will keep updating it as the product evolves.

Who we are

Bidwell is a product of Operosus Ltd, registered in England and Wales (company no. 16186997, VAT no. GB 513 4923 06). We are the data controller for the personal data this site collects.

What we collect

• Account details you give us when you sign up (name, business email, company).
• Documents you upload to your knowledge base.
• Tender activity within Bidwell (matches, drafts, submissions).
• Standard analytics: pages viewed, referrer, broad device type, anonymised IP.
• Stripe billing metadata when you start a paid plan.

How we use it

To run the product (matching tenders to your profile, drafting responses from your knowledge base, billing), to support you when you ask, to improve Bidwell, and to keep things secure. We do not use your knowledge-base content to train shared models.

Where it lives

EU-region database under UK GDPR equivalents. Encrypted in transit and at rest. We share minimum necessary data with sub-processors (Stripe for billing, our cloud host, our AI providers) under contracts that bind them to UK GDPR equivalents.

Your rights

Under UK GDPR you can request access to your data, ask for it to be corrected or deleted, restrict or object to processing, or take it elsewhere. Email hello@bidwell.app and we will respond inside 30 days.

Cookies

We use a small number of first-party cookies. The most important is bw_attr, which stores marketing attribution parameters (UTM tags, gclid, fbclid) for up to 90 days so we can understand which campaigns drive sign-ups. We also load Google Tag Manager and Google Analytics 4 for aggregate site analytics. You can disable cookies in your browser settings or visit our site in private/incognito mode.

Sub-processors

We use a small number of vendors to run the service: Cloudflare (hosting and edge delivery), Supabase (database, EU region), Stripe (billing), Anthropic (AI text generation, no training on customer data), Google (analytics and conversion tracking). Each one is bound by their published Data Processing Addendum.

Changes to this policy

We will update this page when the product or our processing materially changes. The "last updated" date at the top of this page changes when we do.

Contact

Questions about this policy or to make a UK GDPR request, email hello@bidwell.app or write to Operosus Ltd at the registered address above.