Privacy policy

InfraBid Ltd (“InfraBid”, “we”) provides pre-construction estimating software to contractors. For the personal data described here, InfraBid Ltd is the data controller.

• Registered office. Dublin, Ireland
• Company registration number. 823047 (registered in Ireland)
• Contact. info@infrabid.ie

• Account details. When you create an account we collect your email address and a password, which is stored only as a hash we cannot reverse. If you sign in with a provider instead, we receive the email address that provider confirms.
• What you have bought. When you buy a plan or credit we keep the record of it: the Stripe customer and subscription it created, which price was bought, the date the paid period runs to, and the credit it granted or spent. Your payment details are not part of that and never reach us; they are entered on Stripe’s own checkout.
• Pricing documents you price with AI. See the next section: this is the part worth reading properly.
• Work saved in your browser. Estimate names, client names, extracted priced lines, settings and totals are stored locally when you choose Save estimate.
• Questions you ask the assistant. What you type into the Ask panel, and the conversation it belongs to, is sent to Anthropic to be answered. We do not store it.
• Enquiries. If you email us, we receive the contact and project details you choose to include in that message.
• Technical data. Standard server logs kept by our hosting providers, including IP address and timestamps, used for security and diagnostics.

We use no advertising or analytics cookies, no tracking pixels and no third-party analytics of any kind, and we do not track you across other websites. We do count our own visits: each page view is recorded against a code made from the day, your network address and your browser type. The code cannot be reversed and changes every day, so we can see how many people read a page without being able to recognise anyone or follow them from one day to the next. No cookie is set and nothing is stored on your device for this.

This differs depending on whether you are signed in, and it matters for the confidentiality terms most tender documents are issued under.

• Signed out. The document is read in your browser by an on-device parser and matched against the rate library locally. It is not transmitted anywhere.
• Signed in, using AI reading or matching. The document, or the page images taken from it, is transmitted to Anthropic, which operates the Claude model that reads it. Bill line descriptions and candidate rate items are sent the same way when AI matching runs.

We do not store your document. It passes through our function to Anthropic and is discarded; only the structured result returns to your browser. Anthropic processes it under its commercial terms, which prohibit using API content to train models, and retains it briefly for abuse monitoring before deletion.

If a tender document may not lawfully leave your organisation, do not use the AI reader on it. The on-device reader remains available and sends nothing.

• Supabase: accounts, authentication and the rate library database. Hosted in Ireland (eu-west-1); your account data does not leave the EU.
• Anthropic: the AI reading and matching described above, and anything you ask the assistant. Processed in the United States.
• Stripe: takes the payment for anything you buy, and runs the billing portal where a plan is managed or cancelled. The checkout asks for your name, email address, payment details and a full billing address — street, town, postcode and country, required rather than optional — and offers a VAT or other tax ID field you may fill in. Stripe receives all of it, takes the money and tells us the outcome. Stripe’s European entity, Stripe Payments Europe, Ltd., is in Dublin.
• GitHub: serves this website. Receives the IP address of anyone loading a page, in standard server logs.
• Blacknight / myhost: hosts the info@infrabid.ie mailbox, so it holds any email you send us.

We do not sell personal data, and we do not use your commercial data to train any model.

Your account data stays in Ireland. Two flows leave the EEA: content you send to the AI reader, processed by Anthropic in the United States, and website server logs held by GitHub. Both rely on the European Commission’s standard contractual clauses, set out in that provider’s own data processing terms, alongside the safeguards each adds itself. You can avoid the AI reader entirely by using the on-device reader.

Payment is not a third transfer. Stripe takes it through Stripe Payments Europe, Ltd. in Dublin, inside the EEA. Where Stripe’s group in the United States handles the data behind that, Stripe’s own standard contractual clauses carry it.

• To provide the service you requested: performance of our contract with you: running your account, reading a document when you ask for it, and returning a priced estimate.
• To take payment and keep the record of it: performance of our contract with you for the part that takes the money, and our legal obligation for the part that keeps the record.
• To respond to enquiries: steps taken at your request before entering a contract.
• To keep the service secure and working: our legitimate interests in preventing abuse and diagnosing faults.

• Account details: while your account is open, then deleted within 30 days of closure.
• Documents sent to the AI reader: not retained by us; briefly by Anthropic, then deleted.
• Local estimate drafts: until you remove them or clear that browser’s storage.
• Enquiries: up to 24 months from the last contact.
• Server logs: typically 30 to 90 days, depending on the provider.
• Purchase records held here — the subscription record and the credit ledger — go with the account, on the same 30 days.
• The sale itself: kept as the invoice in our Stripe account, for as long as tax and company law requires us to hold a record of what we have sold.

You can delete your account from Settings, which cancels any running subscription and removes your account record, your credit ledger and the work attached to them. The billing record is what remains. Stripe keeps a payment it has processed, as a regulated payment firm must, and our own copy of that invoice is the accounting record the law obliges us to keep: neither is something a deletion request can reach.

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format. Data held only in your browser is already under your control; a priced estimate can be exported to CSV.

Write to info@infrabid.ie and we will respond within one month. If you are not satisfied, you may complain to the Irish Data Protection Commission at dataprotection.ie.

InfraBid sets no cookies at all. It uses your browser’s local storage for five things, each of which supports a feature you have asked for:

• your signed-in session, so you are not logged out on every page;
• your settings and preferences;
• a cached copy of the rate library, so estimates do not re-download it;
• cached AI results, so re-running a bill does not repeat the work; and
• the feed sync marker that decides when news is stale.

Because none of this is advertising, analytics or tracking, no consent banner is required under the ePrivacy Regulations. Clearing site data in your browser removes all of it and signs you out. If we ever add anything non-essential, we will ask for consent before it runs and update this policy.

If we change how we handle personal data we will update this page and, for anything material, make the revised notice clear in the product.

See also our data protection notice, which covers the commercial information you put into the product, and our disclaimer, which explains how the AI is used and its limits.