This Privacy Policy explains how MMIMS LLC ("we", "us"), operator of BidPathAI, collects, uses, shares, and protects personal information through the Service. We are the data controller for personal information processed through the Service, except where Paddle.com acts as the seller of record for a transaction (in which case Paddle is a separate controller for payment-related processing).
Information We Collect
- Account information — name, email, password credentials, sign-in provider identifiers.
- Company profile information you provide (business name, capabilities, personnel, certifications, past performance).
- Uploaded documents — solicitations, amendments, company documents, and derived text extractions.
- Generated proposal content and section revisions you produce in the Service.
- Support communications you send to us.
- Usage and telemetry — device type, browser, IP address, timestamps, page and feature usage, error logs.
- Cookies essential for authentication, session, and preference persistence. See "Cookies" below.
- Payment information is collected and processed directly by Paddle (our Merchant of Record). We do not store full payment-card details.
Purposes & Legal Basis
- Provide, maintain, secure, and improve the Service — performance of contract and legitimate interests.
- Process AI analysis and generation on documents you submit — performance of contract.
- Authenticate accounts and prevent fraud or abuse — legitimate interests and legal obligation.
- Communicate about your account, service updates, and support — performance of contract.
- Marketing communications, where sent — consent, revocable at any time.
- Comply with legal, tax, and record-keeping obligations — legal obligation.
Sharing & Subprocessors
We share personal data only with the following categories of recipients:
- Hosting, database, storage, and email delivery providers that operate our infrastructure.
- Paddle.com as Merchant of Record for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing.
- AI providers that process prompts and documents on our behalf to generate summaries, outlines, and proposal drafts. Providers may include the AI gateway integrated with the Service and, for owner-generated narration, ElevenLabs. We do not represent that these providers refrain from using inputs for their own model training; if that is important to you, review the provider's terms directly before uploading sensitive content.
- Analytics and error-monitoring tooling to understand aggregate usage and diagnose problems.
- Professional advisers (legal, accounting) under confidentiality obligations.
- Authorities when required by law, subpoena, or lawful request.
- Successors in a merger, acquisition, or asset sale, subject to equivalent protections.
We do not sell personal data.
International Transfers
We and our subprocessors may process personal data outside your country of residence, including in the United States. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Data Retention
We retain account and content data while your account is active. When you cancel a paid subscription, your existing work becomes read-only for 30 days, during which you may view and download it. When you request account deletion, records enter a short recovery window and are then deleted or anonymized, subject to legal or record-keeping obligations. Backups roll off on our normal backup schedule.
Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to processing or withdraw consent. Users in the UK/EEA may lodge a complaint with a supervisory authority. To exercise these rights, email lastcallliquids@gmail.com. We generally respond within one month.
Security
We use appropriate technical and organizational measures, including encryption in transit, access controls, per-user data isolation via row-level security, and least-privilege administrative access. No system is perfectly secure and we do not promise absolute security.
Cookies
We use strictly necessary cookies to keep you signed in and remember preferences. Analytics cookies, when enabled, help us understand aggregate usage. You can control cookies in your browser settings.
Children
The Service is not directed to children under 16 and we do not knowingly collect their personal data.
Changes
We may update this Privacy Policy. Material changes are announced in-app or by email.
Contact
Privacy questions: lastcallliquids@gmail.com. Controller: MMIMS LLC, 628 Butler Springs Circle, Grovetown, Georgia 30813, United States.