Privacy policy

This policy explains how BidPilot ("we"), based in Lahore, Pakistan, collects, uses and protects personal information when you visit our website, send a purchase request or use the BidPilot app (the "Service"). By using the Service you agree to this policy.

1. What we collect

• Purchase requests: your name, email and, if you write one, your message, plus the plan you chose, your IP address and browser type.
• Your account: your name, email, plan and usage (for example drafts and proposals sent each month).
• Your Upwork connection: the login token Upwork gives us when you connect, your Upwork account name and ID. Tokens are stored encrypted (AES-256). We never see or store your Upwork password.
• Data from Upwork: job posts, client details shown on Upwork (for example country, hire rate, spend, reviews), your Connects balance and the status of proposals you sent.
• What you add: your settings, keywords, profile text, writing rules, portfolio and proof items, drafts and the changes you make.
• Alerts: your Telegram chat ID if you connect Telegram, and the Upwork alert emails you forward to your BidPilot address if you use that feature.
• Security and logs: sign-in requests (email, IP address, browser and device), and technical logs of the Service's calls to Upwork, AI providers and Telegram.
• Website visits (only if you accept analytics cookies): the pages you view and for how long, the website or campaign link that brought you, your device type, browser and operating system, an approximate location (city and country) and a random visitor number kept in a cookie. The location is looked up from your IP address when you visit, using a database stored on our own server; your IP address is not stored. If you reject analytics cookies, or your browser sends a Global Privacy Control signal, none of this is recorded.

2. How we use it

• to run the Service: find and check jobs, write drafts, send alerts and submit proposals when you tap Submit;
• to answer purchase requests, create your account and send sign-in links and service emails;
• to apply plan limits, prevent abuse, keep the Service secure and fix problems;
• to improve the Service, using usage counts (not the content of your proposals);
• to understand which pages and channels bring visitors and customers to our website (only with your consent).

Our legal reasons for using your data:

• To provide the Service you asked for (your account, jobs, drafts, alerts, purchase requests and service emails).
• Our legitimate interests in keeping the Service secure, preventing abuse and fixing problems (security logs and limits).
• Your consent for website analytics cookies. You can withdraw it at any time under "Cookie settings"; this does not affect what was recorded before.
• Legal obligations, where a law requires us to keep or share information.

We do not sell your personal information and we do not use it for advertising.

3. Who we share it with

We share data only with services we need to run BidPilot, and only what they need:

• Upwork: to read jobs and your proposals, and to send a proposal when you tap Submit.
• AI providers (Anthropic and/or OpenAI): job posts, client details and the profile and writing information you entered are sent to write drafts and fit scores.
• Telegram: alert messages to your chat, if you connect it.
• Hosting, email and network providers (our server host, our email provider and Cloudflare, which also receives forwarded job alert emails).
• Authorities, if the law requires it, or to protect our rights, users or the public.

These providers may process data in countries other than yours, under their own privacy terms.

Website analytics stay on our own server and are not shared with anyone. Approximate locations come from a database file on our server (IP Geolocation by DB-IP, licensed under CC BY 4.0); no IP address is sent to DB-IP or any other company for this.

4. How long we keep it

• Jobs you did not submit, and their drafts: deleted about 24 hours after they were found.
• Jobs you submitted and their proposals: kept while your account exists, for your history.
• Technical logs: 14 days. Alert records: 60 days. Sign-in records: 30 days.
• Usage counts (for plan limits and billing): kept while your account exists.
• Website visits (analytics, only with consent): 13 months, then deleted automatically. The analytics cookies expire after 13 months at most, and your cookie choice after 6 months.
• Purchase requests: kept as business records.
• When your account is removed, its data is deleted, except where we must keep records by law.

5. Security

We use encrypted connections (HTTPS), encrypt Upwork tokens, sign in with one-time email links, limit sign-in attempts and keep each user's data separate. No system is perfectly secure, so we cannot guarantee that data will never be accessed, lost or changed without permission, and we are not liable for that to the extent the law allows.

6. Your choices and rights

• You can change your settings, disconnect Telegram and stop job alert emails at any time in the app.
• You can accept or reject analytics cookies, and change your mind at any time, under "Cookie settings" at the bottom of every page of our website.
• You can disconnect BidPilot from your Upwork account in your Upwork settings.
• You can ask to see, correct or delete your personal data, or close your account, by emailing info@bidpilot.pk. Closing your account does not give a refund.
• If you are in the European Union, the United Kingdom or another place with similar laws, you may also object to how we use your data, ask us to limit it, ask for a copy in a common format, and complain to your local data protection authority. We will answer requests within 30 days.

7. Cookies

We use strictly necessary cookies to sign you in, keep you secure and remember your cookie choice, and analytics cookies only if you accept them. See the cookie policy.

8. Children

The Service is for adults who can hold an Upwork freelancer account. We do not knowingly collect data from children.

9. Changes

We may update this policy. The new version is posted here with a new date and applies from then.