Privacy policy

Effective October 31, 2026

BidBloom is operated by Bertram Technology Solutions. Contact ryan@bertram.tech with privacy questions or requests.

Information we use

We store account details, business profiles and logos, customer contact details, bids, customer decisions, delivery history, opt-outs and payment references to provide the service. Native account passwords are stored as hashes. Stripe handles payment credentials; BidBloom does not store full card numbers or bank-login credentials. Our hosting and delivery providers also process technical information such as IP addresses and request logs for operation and security.

Google and Apple sign-in

If you choose Google or Apple sign-in, we receive your provider account identifier and email address, including its verification status. We use and store these to create or authenticate your account and maintain a link to your chosen sign-in provider. Google sign-in requests only identity and email access; it does not request your Gmail messages, contacts, calendar or Drive files. We do not retain provider access or refresh tokens in your application session.

How information is shared

DigitalOcean hosts the application and database. Mailgun processes email addresses and message contents to deliver confirmations, bids, reminders and operational messages. Stripe processes subscription billing and customer payments; it receives account and transaction details needed for those services. Google or Apple processes sign-in when you choose that option. Service providers process data under their own applicable terms and privacy policies. We may also disclose information when required by law or to protect the service and its users.

We do not sell personal information or use Google account data for advertising. Customer-facing bid links show the business information, scope and prices included in the bid. Treat those private links as confidential: anyone you share a link with can view it.

Cookies and security

We use essential cookies for sign-in, account security and form protection. We use HTTPS, access controls, protected server credentials and encrypted backups. No system can guarantee complete security.

Retention and your choices

We keep information while needed to operate your account, maintain transaction and security records, resolve disputes, or meet legal obligations. Contact us to request access, correction, export or deletion; we may need to verify your identity and retain records required for these purposes. Rotating backups are retained for 30 days, so removed information can remain in a backup until it expires.

You may disconnect BidBloom from your Google or Apple account through that provider’s account settings. This stops future sign-ins through that connection; contact us separately to request deletion of your BidBloom records. Customers can decline a bid or unsubscribe from bid emails. Acceptance, decline, expiration and opt-outs stop scheduled bid reminders.

Business customers and updates

Businesses using BidBloom must have authority to upload customer information and send their messages. BidBloom is intended for business use and is not directed to children. We will update this page when our practices change and provide additional notice or obtain consent when required before using information in a materially different way.