Privacy

Effective November 10, 2026

Your documents stay in your browser

The baseline and addenda you load or paste (PDF, TXT or pasted text), the text read from them, the review name and the results are processed in your browser and stored only in this browser (IndexedDB), together with the purchase record of an unlocked review. PDFs are read only for their selectable text by PDF.js running in your browser; they are never rendered, no script inside a PDF is run and no external document is requested. The documents and their text are never uploaded to BidAddenda. CSV, Excel and PDF files are created in your browser and downloaded directly; BidAddenda sends no email and connects to no project system.

We cannot restore reviews you remove from this browser or lose by clearing site data. Keep your source files and, for unlocked reviews, the purchase record.

What the server receives (operational order data)

This is the only information that reaches our server, and it contains no document text, titles, page contents, filenames or document data:

• Checkout: the payment method you chose, the review’s random ID (a UUID that says nothing about your business) and a random checkout attempt ID. The server creates the checkout with Square or PayPal and returns a signed ticket that your browser keeps.
• Payment verification: the server keeps the provider order identifier, the review ID, a random per-attempt value, and payment status in a private order ledger. It checks with Square or PayPal until the provider confirms a $59 USD payment or the order closes. After a confirmed payment, the return link can restore the unlock in another browser; the server stores only a keyed hash of that return code.
• Unlock check: when you open an unlocked review the review ID and purchase record are sent so the server can confirm them.
• Campaign counters: the server counts real free CSV exports, hosted-checkout starts and provider-confirmed live sales, with a coarse campaign label from a fixed list (for example bidaddenda_guide, bidaddenda_launch, bidaddenda_payappdelta or bidaddenda_tradeclose), the language “en”, payment provider, mode and the integer price paid. It stores no IP addresses, cookies, account identifiers, page counts, text from your documents, file names or document data with these counts. The analytics table uses a keyed hash of the order number to avoid double-counting. Sandbox payments are not counted as sales. The public sample is never counted and never charged.

Payment providers

Payments are handled on Square’s or PayPal’s own pages under their privacy policies. BidAddenda does not see or store card numbers or PayPal credentials.

Local storage

Besides IndexedDB the app uses local storage for the last review you opened and a campaign label from the link you arrived by (kept 30 days). No advertising or third-party tracking scripts are used.

Contact

Questions: contact support.