Privacy Policy
Last updated July 18, 2026
This describes what CivilBid actually collects and who else sees it. It is written against the real system, not a template.
Hiltos LLC, a Michigan limited liability company, operates CivilBid and is responsible for the personal information described here.
What we collect
When you create an account
- Email address, and a securely hashed password if you set one.
- If you sign in with Google: your Google account identifier, email address and display name. We never receive your Google password.
Your business profile — only what you choose to enter
- Business name, description, website and contact details
- Trades you work in, home base city, travel distance, and any map areas you select
- Licences, certifications, insurance and bonding capacity
- Preferred job sizes, staffing capacity and contract preferences
This drives your match scores. Commercially sensitive fields — bonding capacity, job-size preferences, staffing — are used only to calculate your scores and are never shown to other users, whatever your listing setting.
Public business listing
Your profile has a "list my business publicly" setting. When it is on, your business name, description, trades, service area and website may be shown to other users and agencies. Turn it off in your profile at any time. The private fields above are never published either way.
Automatically
- Standard server logs (IP address, browser type, pages requested), used to run and secure the service.
- Opportunities you save, and Bid Briefs you generate.
Stored in your browser, not on our servers
Some preferences stay in your browser's local storage and are never sent to us: which opportunities you have viewed, and your chosen location and map areas when signed out. Clearing your browser data removes them.
Location
If you use "Near me", your browser asks your permission and gives us coordinates to sort results by distance. We do not store that position on our servers or track your movements. If you are signed in and select map areas, those areas are saved to your profile so the setting follows you between devices.
Who else sees your data
These are the only third parties involved, and exactly why:
| Only if you choose to sign in with Google, to verify your identity. Governed by Google's privacy policy. | |
| Anthropic | When you generate a Bid Brief, the solicitation text — including any document you upload — is sent to Anthropic's API to produce the summary. |
| US Census Bureau | Geocoding service, when you type a city or ZIP, to turn it into coordinates. |
| OpenStreetMap | Serves the map tiles. Your browser contacts them directly, so they receive your IP address. |
| unpkg (Cloudflare) | Serves the map library. Your browser contacts them directly, so they receive your IP address. |
| DigitalOcean | Hosts the servers and database. |
Hiltos LLC does not sell, rent or share your personal information with anyone else, and does not use it to train AI models.
Cookies
Three, all strictly necessary. No advertising or analytics cookies.
| cb_session | Keeps you signed in. |
| cb_g_state | Protects the Google sign-in against forgery. Expires in ten minutes. |
| cb_g_verifier | Secures the Google sign-in exchange. Expires in ten minutes. |
How long we keep it
- Account and business profile — until you ask us to delete it.
- Sessions — expire automatically; logging out ends them immediately.
- Server logs — a short operational period, then discarded.
Your choices
Write to [email protected] and we will:
- Tell you what we hold about you
- Correct anything wrong — most of it you can edit yourself in your profile
- Delete your account and personal data
- Send you a copy of your data
Depending on where you live you may have additional statutory rights; we honour these requests regardless of where you are.
Security
Traffic is encrypted in transit. Passwords are hashed, never stored in readable form, and session tokens are stored hashed. The database is reachable only over a private network. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
The opportunity data itself
The solicitations on CivilBid are public records published by government agencies. They are not personal information about you, and our collection of them is unrelated to your account.
Children
CivilBid is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
Changes
If we change this policy we will update the date above, and tell you directly if the change is significant.
Contact
Hiltos LLC
[email protected]
See also our Terms of Service.