Privacy

Last updated 5 November 2026

This notice explains what TidyBids, a Nivibox product, stores, who helps us run it, and the choices you have.

What we store

• Your account: your name, email address and password. Passwords are hashed before they are stored and are never written to logs.
• Your business profile: the business name, contact details, address, logo link, currency and timezone you enter.
• Records you create: customers, services, quotes, and the responses your customers submit through a quote link.
• Inquiries: the details people submit through your public inquiry form. Inquiry records don’t include the sender’s IP address.

Your customers’ information

You decide which customer details to enter. A shared quote link shows the customer’s name, line items, totals, notes, exclusions and terms, but not the customer’s email, phone, address or your private notes. Anyone who has the link can view the quote and respond, so share it only with the intended customer. Until a quote is accepted, you can turn its link off from your dashboard.

Service providers

• Cloudflare serves this website.
• DigitalOcean hosts the TidyBids server and database.
• DeepSeek receives notes text only when you use the optional notes review and the feature is enabled (see below).

Like most online services, our hosting and network providers process IP addresses and request details (such as browser type and time) in operational logs, used to deliver the service and protect it against abuse.

If you add a logo link to your business profile, the image is loaded from that address whenever a quote or inquiry form is viewed, so the image host may see the viewer’s IP address.

Optional notes review

When you click “Review notes”, only the notes text you are reviewing is sent. Our server attempts to remove obvious email addresses and phone numbers first, then forwards the text to DeepSeek to generate suggestions. Masking is pattern-based and may miss things, so leave names, addresses and other private details out of text you send for review. No customer record or business profile is attached. This happens only when you request it, and only while the feature is enabled.

In your browser

• Your sign-in token is kept in this tab’s session storage and cleared when the tab closes. Sessions expire after 12 hours.
• Your light/dark theme choice is saved in local storage. It contains no personal data.
• We don’t use advertising or analytics trackers.

What we don’t do

• We don’t sell your data or your customers’ data.
• We don’t email or text your customers; you send quotes yourself.
• We don’t process payments.

Your choices

You can edit or delete customers and services at any time. To request a copy of your data or deletion of your account, email [email protected]. During early access, these requests are handled manually.

Changes

If this notice changes in a meaningful way, we’ll update this page and the date above.