Privacy

1. Data controller

CRM-Line, Lda. · TIN 507 830 466 · Estoril, Portugal · email privacy@bidyou.ai

2. What we collect

Waitlist signup: email address. Collected to notify you when bidyou.ai launches and to assess early-access fit.
Server logs: IP address, user-agent, page visited, timestamp. Retained 30 days for security and diagnostics.
No tracking cookies, no third-party analytics, no advertising pixels.

3. Legal basis (GDPR)

Waitlist email is processed on the basis of consent (you actively submit the form). Server logs are processed on the basis of legitimate interest (security and abuse prevention).

4. Retention

Waitlist emails: until product launch + 12 months, or until you opt out.
Server logs: 30 days.
Communications related to early-access: while the relationship lasts + 5 years (accounting obligation if applicable).

5. Your rights

You have the right to access, correct, delete, port, restrict, or object to the processing of your data. To exercise any of these rights, write to privacy@bidyou.ai. You also have the right to file a complaint with the Portuguese supervisory authority, CNPD — cnpd.pt.

5b. Cookies

This site uses no tracking cookies, no analytics cookies, and no advertising cookies. No cookie banner is shown (ePrivacy art. 5(3) — strictly necessary exception).

6. Subprocessors

Infrastructure is hosted in Portugal (CRM-Line own servers). Email delivery to your inbox passes through your own provider (Google, Microsoft, etc.) according to your address. We do not share data with third parties for marketing purposes.

7. Cross-border transfers

bidyou.ai is operated from Portugal (EU). Data is processed within the EU. Should that change in the future (e.g., for global product distribution), we will rely on Standard Contractual Clauses and update this policy.

8. AI processing

bidyou.ai will, as part of its product features, process construction estimating data uploaded by customers. That data is processed locally on customer or CRM-Line infrastructure (not sent to external LLM APIs). When the product launches, a separate Data Processing Agreement (DPA) will govern that processing. This privacy policy concerns only the marketing site and waitlist.

9. Changes

This policy may be updated. Current version shown at the top. Last update: 10 May 2026.