Privacy Policy

1. Introduction

Wharton Hardware & Supply Co. ("Wharton," "we," "us," or "our") operates the BidVision platform at bidvision.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the Service. By using BidVision, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you log in to BidVision, we collect information provided by your Google account, including:

• Full name (display name)
• Email address
• Profile photo URL (if provided by Google)

2.2 Business Data

In the course of using BidVision, you and other authorized users may enter business data including:

• Project bids, quotes, and proposal details (company names, project addresses, pricing)
• Lease and rental agreements
• Customer and vendor contact information (names, phone numbers, addresses, emails)
• Sales activity logs and CRM records
• Equipment inspection records and measurements (T-120 Clutch Program)
• Fleet vehicle maintenance logs
• Rebar fabrication job records
• Material inventory data
• Submittal documents and product data sheets
• Internal chat messages and discussion comments
• Uploaded files, images, and documents (PDFs, photos)

2.3 Automatically Collected Data

• Last sign-in timestamp
• Browser type and device information (via Firebase Analytics, if enabled)
• IP address (collected by Google Firebase infrastructure)
• Usage patterns and page interactions (via Firebase Analytics)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the BidVision platform
• Authenticate your identity and manage role-based access control
• Deliver in-app notifications about bids, approvals, inspections, and other business events
• Generate business reports, lease agreements, and bid documents
• Track equipment inspections and maintenance for regulatory compliance
• Facilitate internal team communication and collaboration
• Monitor application performance and troubleshoot issues
• Enforce our Terms of Service and protect against unauthorized access

4. Data Storage & Security

All data is stored in Google Firebase Cloud Firestore and Firebase Storage, hosted on Google Cloud Platform infrastructure in the United States. We implement the following security measures:

• Authentication: All access requires Google Sign-In via Firebase Authentication
• Authorization: Firestore Security Rules enforce role-based access control (Super Admin, Admin, Regional Admin, Sales Rep, Yard Manager, User, Read-Only Viewer, Customer Portal)
• Encryption: Data is encrypted in transit (TLS/SSL) and at rest (Google Cloud default encryption)
• Access Control: Tab-level permissions restrict access to sensitive business areas
• HTTPS: All connections are served over HTTPS with valid SSL certificates

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these circumstances:

• Within Wharton: Authorized employees access business data through the platform according to their assigned role and region
• Customer Portal: Customers with portal access can view only their own bid/quote information
• Service Providers: We use Google Firebase (Cloud Firestore, Authentication, Storage, Hosting, Analytics) as our infrastructure provider. Google's privacy practices are governed by the Google Privacy Policy
• Legal Requirements: We may disclose information if required by law, regulation, or legal process

6. Data Retention

Business data (bids, leases, inspections, maintenance logs) is retained for as long as the Wharton business requires it for operational, legal, or regulatory purposes. User account data is retained for the duration of employment or authorized access. Data can be deleted by a Super Admin at any time.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal data
• Object to or restrict certain processing of your data

To exercise any of these rights, contact your system administrator or email us at the address below.

8. Third-Party Services

BidVision integrates with the following third-party services:

• Google Firebase: Authentication, database, storage, hosting, and analytics
• Google Maps / Distance API: Address geolocation and distance calculations for bids
• Google AI (Gemini): AI-assisted takeoff analysis for bid estimation (data is processed per Google's AI terms)

Each service has its own privacy policy. We encourage you to review them.

9. Cookies & Local Storage

BidVision uses browser local storage and cookies for authentication tokens (managed by Firebase Auth), theme preferences (light/dark mode), and region selection. We do not use third-party advertising cookies.

10. Children's Privacy

BidVision is a business-to-business application and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of BidVision after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact: