Viewing terms for: Client · Service Provider
NormBid Service Provider Privacy Policy
This policy describes how the current NormBid marketplace handles account, project, proposal, and support information. “Client” means a business posting a project; “Service Provider” means one responding. Read the Terms of Service for the marketplace rules. Signed-in users can contact us through Support.
1. Information you provide
Account registration asks for a contact name, business name, account email, business address and phone number, account type, and a password. You may provide self-reported license type, number, and issuing authority. Account and profile updates can add a general location and business description. A Client can post titles, categories, locations, budgets or exact prices, deadlines, scope, and PDF or image attachments. A Service Provider can submit prices, proposals, interest messages, and an associated-license Yes/No answer. Users can submit reviews, ratings, reports, support tickets and replies, and completion confirmations. Please avoid sensitive records or other people's confidential information unless truly needed and permitted.
2. Information created by use
NormBid stores account and public reference numbers, account role and plan, dates of creation and activity, listings, responses, selections, reviews, reports, support activity, and records of acceptance of site terms. Passwords are stored as salted hashes, rather than readable passwords. Session identifiers, anti-forgery values, reset tokens, security attempts, and admin activity help authenticate and protect the service. The server receives technical request information such as a network address and browser request details; some security rate-limit records incorporate a network address. The current site uses a session cookie for sign-in. It does not currently run advertising tracking or sell account information. First-party traffic measurement records aggregate page categories, traffic source, campaign tags and device category. Daily pseudonymous visitor estimates use a rotating, keyed digest of the network address and browser description; raw addresses and browser descriptions are not stored in the analytics tables. Traffic records are retained for up to 90 days. Standard hosting/security logs may have their own retention.
3. Public and participant visibility
A public business profile can show company name, Client or Service Provider role, general location, profile text, joined month, ratings, review text, and a count of mutually confirmed completions. A Client's project details show its company name, general location, scope, price or budget, deadline, and any project files to signed-in eligible Service Providers. Other Client accounts cannot browse one another's projects. A response's amount, message, contact name, license answer and available self-reported license details are shown to the Client for that project and may be accessed by NormBid staff. Other competing Service Providers do not see those responses. After a Client selects a Service Provider, the selected businesses can see one another's account email, business phone, and business address; the Service Provider also sees the Client contact name. A user may reveal more by writing it into a visible field or attachment. Do not assume uploaded files or public reviews are confidential.
3B. Private conversations and response files
We store private message text, sender and business identifiers, team actor names, message dates, read records, screening status, reports, review decisions and response attachments. Conversations are accessible to the two participating business accounts, including their authorized team members. Competing providers cannot see them. Authorized NormBid staff may access conversations for moderation, reported conduct and support. Unapproved response documents are accessible to the uploading business and staff; Clients see documents only after approval. Message emails contain a sign-in link rather than the message text and go to the business owner when enabled. Retention and account-request rules below also apply to this content.
3A. Team and business tools
We store employee names, login emails, hashed passwords, invitation/reset tokens, legal acceptance and action-request logs under the business account. The business owner can view team membership and activity; authorized employees can access shared business responses, selected contact details, support records, saved searches, alerts and proposal templates. Employee login details are not shown on the public business profile. Saved filters and templates are private to the business. Optional matching emails are sent to the owner and can be paused by managing the saved search. Revoking employee access ends their sessions. Individual activity logs record paths and actor names without passwords or submitted proposal text.
4. Why we use the information
We use records to set up and protect accounts; show profiles and projects; accept and route responses; apply proposal allowances; share selected contact details; show reviews; maintain support and abuse queues; investigate possible misuse; and operate the service. If outgoing email is configured, we may send account reset and selection messages to the relevant email addresses. When AI help is enabled, questions entered into the public help widget and a short portion of that chat are sent to Groq to generate answers about the site. Business names, contact and license details, public profiles, listing and response text, and reviews may be sent to Groq for automated safety screening before other users can see them. Passwords, authenticator secrets, and full payment card numbers are excluded from moderation. We store private project drafts for Clients to edit and publish later; only the author and authorized staff can access drafts. Moderation decisions and staff corrections are recorded. Flagged content and screening reasons are available to operations staff for review. If screening is unavailable, new content is held for manual review. Listings with attached files are held for staff review because this text screening does not analyze those files. Do not put passwords, payment details, confidential project information, or other sensitive information into the help widget. The assistant cannot view or change your account; for a specific issue, use Support. If AI help is unavailable, the widget uses preset answers. When paid membership checkout is enabled, Stripe collects and processes Service Provider payment details; NormBid does not store full card numbers. We store Stripe customer and subscription identifiers, membership status, invoice amount, and staff refund records to control access and support billing. NormBid does not collect project payments between businesses and does not currently send marketing campaigns automatically from the app.
4A. Optional email updates and offers
If you separately subscribe, we store your email address, signup source, consent wording and version, consent date, subscription status, and unsubscribe token. We use this list for NormBid news, product updates, and promotional offers. Joining is optional and does not require an account; creating an account does not add you to this list. Only the NormBid operations owner can access and export the subscriber list. An authorized email delivery provider may process exported addresses for these campaigns. Each campaign must include your unsubscribe link. Unsubscribing stops marketing to that address; it does not change necessary account or project notifications. We retain subscription history and a suppressed address to honor opt-outs and record preferences.
4B. Custom integration inquiries
If you request a custom integration demonstration or proposal, we store your name, organization, email, optional phone number, role, locations, existing systems, description of needs, submission date, and inquiry status. Authorized NormBid operations staff can access these details to respond, scope a solution, and follow up on your request. Your inquiry does not create a marketplace account, begin a paid subscription, or enroll you in marketing emails. Please avoid confidential records in this form. Contact support@normbid.com about correcting or removing inquiry information; the retention and request rules below apply.
5. Service providers and legal disclosures
Hosting, email delivery, backups, and similar technical providers may process information for NormBid if and when configured. We may disclose information when required by law, to respond to legal process, or where reasonably needed to investigate abuse or protect users and the service. We do not promise that any provider's business information or licensing claim has been verified. The other business may independently retain information it lawfully receives after selection; its separate practices are outside NormBid's control.
6. Cookies and security
Sign-in requires a session cookie. The updates signup uses a short-lived anti-forgery cookie. Your browser stores a preference to avoid repeatedly showing the signup popup; this preference contains no email address. The help widget uses a short-lived cookie to limit repeated requests; this cookie does not identify your account. The current site does not offer an advertising-cookie preference panel because it does not currently use advertising trackers. We use account access controls, password hashing, session controls, and limited staff access in the application. No system or transmission can be guaranteed perfectly secure. Do not place sensitive information into listings or support reports unless necessary. Report suspected unauthorized account access through Support. If we add analytics, tracking, payment, or other integrations later, this policy and any required choices must be updated first.
7. Retention and account requests
We retain information while it is needed to provide the service, investigate safety and support matters, protect accounts, maintain an accurate record of marketplace activity and accepted terms, and meet legal requirements. The prototype has no automatic account-deletion timer, so we do not promise a fixed retention period. You can edit business and public profile details in your account. Ask Support about correcting or removing account information or content. Some records may need to be retained for security, recordkeeping, legal claims, or other legitimate reasons; a removed public item may remain in backups for a period. Other businesses may retain copies of information already shared with them. We will evaluate requests under applicable law and explain what action is available.
8. Children, changes, and contact
NormBid is for adults acting for businesses, not children under 18. We may change this policy as our service changes. The effective date and version at the top identify the current text. Material changes to how we use or share account information may call for additional notice or choices. Signed-in users may reach us through Support.