Privacy Policy
Last updated: July 1, 2026
1. Who we are
BidCommand ("we," "us," or "our") is a government contracting and proposal platform operated by FocusFlow Digital LLC, doing business as Coach Kay Elevates. Our platform is available at bidcommand.io. You can reach us at hello@coachkayelevates.org.
2. Information we collect
Account information: When you create an account, we collect your name, email address, and company name. Optionally, you may provide your company website, phone, city, state, UEI, CAGE code, NAICS codes, and capabilities statement.
Usage data: We collect information about how you use BidCommand, including pages visited, features used, and actions taken. This helps us improve the product.
Payment information: Payments are processed by Stripe. We do not store your full card number. Stripe's privacy policy governs payment data.
Communications: If you contact us by email, we keep records of that correspondence.
3. How we use your information
- To provide and operate the BidCommand platform
- To personalize bid discovery and AI proposal drafting to your company profile
- To send compliance digests and opportunity alerts you have subscribed to
- To process payments and manage your subscription
- To improve the platform through analytics
- To respond to support requests
4. Data storage and security
Your data is stored on Supabase (PostgreSQL) hosted on AWS infrastructure. We use Row Level Security and Column Level Security to ensure users can only access their own organization's data. Sensitive fields such as SSN last-4 digits (used in WH-347 certified payroll) are restricted to service-role access only and are never returned in standard API queries.
5. Third-party services
- Supabase — database and authentication
- Stripe — payment processing
- Resend — transactional email delivery
- PostHog — product analytics (privacy-friendly, no cross-site tracking)
- OpenRouter / Anthropic Claude — AI proposal drafting (prompts include your company profile data)
6. Cookies
We use cookies for authentication session management (Supabase auth cookie), Stripe checkout state, and product analytics (PostHog). See our Cookie Policy for details.
7. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing hello@coachkayelevates.org. Account deletion removes your profile and organization data. We retain billing records as required by law.
8. Data retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain it (e.g., payment records for tax purposes).
9. Children
BidCommand is not directed to children under 13. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy. We will notify you of material changes by email or by posting a notice in the app. Continued use after the effective date constitutes acceptance.
11. Contact
Questions about this policy? Email us at hello@coachkayelevates.org.