Privacy Policy

This Privacy Policy describes how KoreBid LLC ("KoreBid," "we," "us," or "our"), collects, uses, shares, and protects information in connection with our websites, mobile applications, and related services (together, the "Service"). It also explains the choices and rights you have regarding your information. By creating an account or using the Service, you acknowledge that you have read and understood this Policy.

If you do not agree with this Policy, please do not use the Service. This Policy is incorporated into and subject to our Terms of Service.

1. Our two roles: controller and processor

KoreBid handles two different categories of personal information, and our responsibilities differ for each:

• Information about you, our customer (we are the "controller"). This includes your account and business details, billing information, and how you use the Service. We decide how and why this information is processed, as described in this Policy.
• Information you enter about your own clients and jobs (we are the "processor").When you add your customers, record conversations, upload photos, or build estimates, you may include personal information about third parties (for example, a homeowner's name, address, or phone number). You control that information; we process it on your behalf and under your instructions to provide the Service. You are the controller of that data and are responsible for having a lawful basis to collect it and for providing any notices or obtaining any consents required from those individuals.

2. Information we collect

• Account & business information — your name, email address, password (stored only in hashed form), and your company profile, such as business name, phone, address, license number, logo, and pricing settings.
• Content you create and submit — estimates, proposals, customers, tasks, site visits, price books, messages, and the voice recordings, transcripts, and photos or plan documents you capture or upload to build estimates.
• Customer and job information you enter — the names, contact details, addresses, and job details of your own clients, which may include their personal information.
• Payment information — processed by our third-party payment processor. We do not receive or store your full card number; we retain only a customer/subscription reference, plan status, and billing history.
• Usage & device data — logs, app interactions, and device and connection information (such as device type, operating system, and app version) used to operate, secure, and improve the Service.
• Approximate location — a coarse, city-level location derived from your IP address for security and analytics. For product analytics we store your IP address only as a salted, one-way hash, not in raw form. For security and fraud-prevention purposes — such as audit records of sensitive account actions and sign-in history — we may retain the raw IP address for a limited period. We do not collect precise GPS location.
• Communications — messages you send to our support team and your communication preferences.
• Cookies & similar technologies — used to keep you signed in, remember preferences, understand website usage, and measure the performance of our advertising (see "Cookies, analytics & advertising" below).

3. How we use information

• To provide and operate the Service — creating your workspace, generating estimates, delivering proposals, and processing e-signatures.
• To process voice recordings into transcripts and turn conversations, photos, and job details into structured estimates using AI (see "AI processing" below).
• To handle billing, subscriptions, receipts, and account-related communications.
• To provide customer support and respond to your requests.
• To secure the Service, authenticate users, prevent fraud and abuse, and enforce our Terms.
• To understand and improve the Service, including product analytics and troubleshooting.
• To send service and, where permitted, marketing communications — you can opt out of marketing at any time.
• To comply with our legal obligations and to establish, exercise, or defend legal claims.

4. Legal bases for processing (EEA/UK users)

Where the EU or UK General Data Protection Regulation applies, we process personal information on these legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, operate, and improve the Service, where not overridden by your rights); consent (where required, such as certain communications — which you may withdraw at any time); and legal obligation (to comply with applicable law).

5. AI processing & the third parties we share with

A core function of KoreBid is turning your on-site conversations, photos, and notes into estimates. To do this, we share the content you capture with a small number of third-party AI service providers acting on our behalf. We describe them by role rather than by name:

• A speech-to-text provider receives your audio recordings to transcribe them into text.
• An AI language provider receives the transcript and job details (and any pricing or context you provide) to draft the structured, line-item estimate.
• An image & document AI provider receives photos or plan documents you attach, when you use that feature, to read scope, materials, damage, and dimensions.

These providers are contractually restricted to processing your content solely to perform the transcription and generation for you. They are not permitted to use your content to train their own models, and each is bound by confidentiality and data-protection obligations at least as protective as this Policy. KoreBid itself does not use your content (your recordings, transcripts, customer data, estimates, or other Customer Content) to train generative AI models. We may use aggregated or de-identified information — which does not reasonably identify you, your organization, or any individual — to operate, secure, and improve the Service. You accept this AI processing when you create your account, and you remain responsible for obtaining any recording consent required in your jurisdiction.

6. How we share information

We share personal information only as described here. We do not sell your personal information for money. However, we use advertising and analytics partners, and the associated identifiers we share with them may be treated as a "sale" or as "sharing" for cross-context behavioral advertising under some U.S. state privacy laws. You can opt out — see "Cookies, analytics & advertising" below.

• Service providers (subprocessors) — vendors that help us run the Service under written agreements that protect your data, including providers for cloud hosting and infrastructure; database, authentication, and file storage; the AI providers described above; payment processing; text-to-speech; transactional email; product analytics; and, where you enable it, SMS messaging.
• Advertising & measurement partners — we use Meta Platforms (Facebook/Instagram) advertising tools, including the Meta Pixel and the Conversions API, on our public marketing and sign-up pages. These send Meta online identifiers such as cookie IDs (for example _fbp/_fbc), your IP address and device/browser information, and — when you sign up — a hashed (one-way) version of your email address and an account identifier, so that we can measure and optimize our advertising and build similar or retargeting audiences. We also use a product-analytics provider that may associate usage with your account and email (see below). Under California and some other state laws this may be a "sale" or "sharing" for cross-context behavioral advertising.
• At your direction — for example, when you send a proposal to your client or connect an optional third-party integration you choose to enable.
• Legal & safety — when we believe disclosure is reasonably necessary to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of KoreBid, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• Aggregated or de-identified information — which cannot reasonably be used to identify you.

7. Cookies, analytics & advertising

We use strictly necessary cookies to keep you signed in and secure your session. We also use:

• Product analytics — a product-analytics provider that helps us understand how the Service and our site are used (such as pages viewed, referring site, and device type) and record sessions of our marketing and sign-up pages to improve them. When you have an account, these events and recordings may be associated with your account identifier and email address, so this analytics is not always anonymous.
• Advertising & measurement — on our public marketing and sign-up pages we use the Meta advertising tools described in "Advertising & measurement partners" above, which set cookies and send identifiers to Meta to measure conversions and optimize our ads. We do not run these advertising tools inside the signed-in product dashboard or on the customer proposal pages.

Your choices.You can opt out of this advertising "sale"/"sharing" and of targeted advertising by emailing accounts@korebid.com with the subject "Do Not Sell or Share," and we honor the Global Privacy Control (GPC) browser signal as a valid opt-out for the browser that sends it. You can also manage cookies in your browser and your ad preferences in your Meta account. Because there is no common standard, we do not respond to browser "Do Not Track" signals.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. If you delete your account, we delete or anonymize your associated data in line with these practices, except where retention is required by law.

Deleting your account in the app is immediate and irreversible.If you are the only member of your workspace, choosing "Delete account" permanently removes the workspace and its data right away — so request any export you want before deleting. If instead we terminate your account (for example, for non-payment), we make your workspace content available for export for 30 days (unless the termination was for unlawful conduct, a security risk, or a legal prohibition), after which we may delete it from active systems. Residual copies may remain temporarily in encrypted backups, or where retention is required for security, fraud prevention, dispute resolution, or legal compliance, and are deleted or overwritten on our regular backup cycle. This aligns with the data provisions of our Terms of Service. Business customers who require a Data Processing Addendum (DPA) may request our current DPA at accounts@korebid.com.

9. Security

We protect information using industry-standard safeguards, including encryption in transit, tenant isolation through database row-level security, hashed passwords, access logging, and least-privilege access controls. No method of transmission or storage is perfectly secure, but we work continuously to protect your information and to detect and respond to incidents.

10. Where your data is stored & international transfers

The Service is operated in the United States, and your information is processed and stored in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country. Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Your privacy rights

Depending on where you live, you may have the right to access, correct, update, port, or delete your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. To exercise any of these rights, email us at accounts@korebid.com. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights. You may also delete your account and associated data directly in the app under Settings. If a request concerns data you entered about your own clients, we may direct that request to you as the controller of that data.

12. EEA & UK residents (GDPR)

In addition to the rights above, you have the right to lodge a complaint with your local data-protection authority. Where we act as a processor of the client and job data you enter, we process it under your instructions and our agreement with you.

13. California residents (CCPA/CPRA)

Over the past 12 months, we have collected the categories of personal information described in "Information we collect" (identifiers, customer records, commercial information, internet/usage activity, coarse geolocation, and audio/visual content you record or upload), for the business purposes described in "How we use information," and have disclosed them to the categories of service providers described in "How we share information," and — for the online identifiers and hashed email described in "Advertising & measurement partners" — to an advertising partner (Meta) for cross-context behavioral advertising.

We do not sell personal information for money, but our use of advertising partners may be considered a "sale" or "sharing" for cross-context behavioral advertising under the CCPA/CPRA. California residents have the right to know, access, correct, and delete personal information, to opt out of this sale/sharing, to limit the use of sensitive personal information, and to be free from discrimination for exercising these rights. To opt out, email accounts@korebid.com with the subject "Do Not Sell or Share"; we also honor the Global Privacy Control (GPC) signal. To exercise any other right, email the same address. You may use an authorized agent to submit a request on your behalf.

14. Other U.S. state privacy rights

Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale, or certain profiling. We use targeted advertising through the partners described above; you may opt out of targeted advertising and any sale or sharing by emailing us with the subject "Do Not Sell or Share," or via the Global Privacy Control signal. To exercise your other rights, contact us at the address below; where required, you may appeal a decision by replying to our response.

15. Recordings & consent

KoreBid lets you record conversations to build estimates. Recording laws vary by location, and some jurisdictions require the consent of all parties. You are solely responsible for obtaining any consent required by the laws of your jurisdiction before recording, and for informing the people you record as required. Recordings are stored privately within your workspace and are used to generate your transcripts and estimates as described in this Policy.

16. Account & data deletion

You can delete your account at any time from Settings in the app, which removes your account and associated workspace data (subject to any retention required by law). You may also email accounts@korebid.com to request deletion or an export of your data.

17. Children's privacy

KoreBid is a business tool intended for users 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

18. Third-party links & services

The Service may link to or integrate with third-party websites and services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.

19. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice or ask you to re-accept. Your continued use of the Service after an update means you accept the revised Policy.

20. SMS & mobile messaging

With your consent, KoreBid sends text messages (SMS) to the mobile number you provide — for identity verification (a one-time code when you create a KoreBid account) and for account and transactional notifications about your KoreBid workspace. You provide consent by entering your mobile number and submitting it on our sign-up form, which displays the applicable messaging disclosure. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. Text-messaging originator opt-in data and consent are not shared with any third parties. We share your mobile number and message content only with the vendors that help us deliver the messages — our SMS provider and the mobile carriers — solely to transmit them to you.

21. Contact us

KoreBid is operated by KoreBid LLC. If you have questions, requests, or complaints about this Policy or your information, contact us at accounts@korebid.com.