Privacy Policy
Effective October 11, 2026
What we collect, why, who helps us, how long we keep it, and your choices.
Also read: Terms Of Service | Human Services Terms | Data And Legal
The Short Version
- We collect what we need to run your proposals, bill you, and talk to you.
- We do not sell your data. We do not share it for ads.
- Your files are never used to train AI models, ours or anyone else's.
- Your proposal jobs and their files delete themselves 30 days after you create them. You can delete any job sooner, any time. While a human service you bought is open, the files for it are kept until 30 days after it is delivered.
- AI processing is set to run in the United States.
- Do not upload Controlled Unclassified Information (CUI), ITAR or EAR technical data, classified information, or government information from a contract you hold now.
Who We Are
Dalton Rios LLC, a Wyoming limited liability company ("we," "us," "our"), runs GradeTheBid (the "Service") and collects every payment for it, through Stripe. This policy covers the Service at app.gradethebid.com, our website at gradethebid.com, and our waitlist. It explains what we collect, why we collect it, who helps us process it, how long we keep it, and what choices you have.
Contact: admin@daltonrios.com, Dalton Rios LLC, 30 N Gould St Ste N, Sheridan, WY 82801.
What We Collect
| What | Examples | Where It Comes From |
|---|---|---|
| Account information | Name, email, sign-in details (your password is stored scrambled, so we never see it), two-factor settings, the team members you invite | You |
| Company profile | Company name, UEI, CAGE code, NAICS codes, set-aside status, capability statement, past performance, names and resumes of key people, reference contacts | You |
| Files you upload | Solicitations, amendments, your own drafts, and the files and notes you send with a human service's intake form | You |
| What the Service makes for you | Compliance matrices, clause checks, drafts, grades, fix lists, exports | The Service, from your files |
| Payment information | Stripe collects your card. We never see or store your full card number. Stripe sends us your name, billing email and address, card brand, last 4 digits, plan, and payment status | Stripe |
| Credits and usage | Credit balance, credit history, which steps you ran, page counts, how much AI each job used and what it cost us | The Service |
| Device and log data | IP address, browser, device type, pages viewed, sign-in times, error logs | Your browser and our servers |
| Cookies | Only the cookies needed to sign you in, keep you signed in, remember your settings, and remember the invite link that brought you, if one did. No advertising cookies. | Your browser |
| Waitlist, event, and contact forms | First and last name, email, mobile number, business name, what you bid on, set-aside status, and whether you agreed to texts | You |
| Messages with us | Emails, support requests, feedback | You |
Other people's information. Your company profile can include other people's details, like employees' resumes and your references' phone numbers and emails. Add them only if you have the right to share them with us for your proposal.
Why We Use It
- To run the Service: read your solicitation, build your compliance matrix, run the clause check, write drafts, and grade drafts.
- To run your account: sign-in, two-factor login, team seats, and security.
- To bill you and keep your credit count right.
- To keep the Service safe: stop abuse, find and fix bugs, block attacks, and enforce our Terms of Service.
- To talk to you: receipts, account notices, changes to our policies, and (only if you agreed) launch news and offers. Every marketing email has an unsubscribe link.
- To measure cost: we log how much AI each job uses and what it costs us, so we can keep prices where they are.
- To follow the law: tax records and valid legal requests.
- To improve the Service: we use usage counts and error logs. We use the content of your files to improve the Service only if you give us a separate yes (opt-in), for example to compare grades with real award results. Saying no changes nothing about your account.
No AI Training On Your Data
We do not use your uploads, company profile, drafts, or grades to train AI models. The AI in the Service runs on Anthropic's commercial Claude API. Anthropic's commercial terms say it does not use customer content sent through the API to train its models.
Who Processes Your Data For Us
| Company | What They Do For Us | What They Get |
|---|---|---|
| Anthropic, PBC | Runs the AI that reads your solicitation, drafts, and grades | The text of your solicitation, profile, and drafts while a step runs. Set to process in the United States. Anthropic may keep API inputs and outputs for a limited time under its own policies, for example to check for misuse. |
| Stripe, Inc. | Payments, subscriptions, receipts, and the billing portal | Your payment details and billing contact, under Stripe's own privacy policy |
| Render Services, Inc. | Hosts the app, the database, and file storage in a US region | Everything stored in your account, encrypted in storage and in transit |
| HighLevel, Inc. (GoHighLevel), through Dalton Rios LLC's account | Waitlist, event sign-ups, human service orders, email, and text messages | Waitlist and contact details, what human service you bought and its due date, email and text history |
| Google (Google Fonts) | Serves the fonts the app uses | Your IP address, because your browser asks Google for the fonts |
These companies may use your data only to do their job for us.
When Else We Share
- With your team. People you add to your account can see the jobs and the company profile in that account.
- With the expert on your job. If you buy a human service (Pro Plus A Human, the Expert Red Team Review, Done For You, or Bid Team), the GradeTheBid Certified Expert assigned to that job sees the files and information for that job, and so does our quality reviewer if the job is spot checked. Experts are bound in writing to keep them confidential, work on them inside the app, and use them only for your job. The Human Services Terms say more.
- With your consultant. If a consultant runs the Service for you, the consultant controls that account and sees what is in it.
- When the law requires it. For example a valid subpoena or court order, or to protect someone's safety. We tell you first when the law lets us.
- If the business changes hands. If the Service moves to another company we own or co-own, or is sold or merged, your data moves with it under this policy, and we tell you before it moves.
- With your yes. Anything else, only when you say yes.
We Do Not Sell Your Data
We do not sell personal information. We do not share it for targeted advertising. We do not rent or trade contact lists.
Text Messages
If you agree to texts, they come from Dalton Rios LLC. Message frequency varies. Message and data rates may apply. Reply STOP to stop, or HELP for help. We do not share your mobile number with anyone for their own marketing. Your text opt-in and consent are never shared with third parties, except the texting provider that sends our messages for us.
How Long We Keep It
| What | How Long |
|---|---|
| Proposal jobs (uploaded solicitations, drafts, matrices, clause checks, grades, and exports stored in the app), and tool results | Deleted automatically 30 days after the job is created. You can delete any job sooner with "Delete Job And Files." Download your exports before then. A proposal job that an open human service uses is kept like the human service's files (next row). |
| Human service files (what you upload with a human service's intake form) | Kept while that human service job is open, and for 30 days after it is delivered or refunded. Then deleted automatically. The order itself (what you bought, when, and its status) is kept with the billing records. |
| Company profile, your team, your libraries, your Bid Tracker, and your Contract Manager | Until you change them, delete them, or close your account |
| Account information | While your account is open, then deleted within 30 days after you close it |
| Billing records and credit history | 7 years, for tax and accounting |
| Security activity (sign-ins, failed sign-ins, password, two-factor, and plan changes, shown on your Account page) | One year, then deleted |
| Backups | Deleted items leave our backups within 14 days |
| Waitlist and marketing contacts | Until you unsubscribe or ask us to delete them |
| Server logs | Up to 90 days |
| Copies held by Anthropic | Under Anthropic's own retention period (see the table above) |
How We Protect It
- HTTPS on every page.
- Encrypted storage in a US region.
- Two-factor sign-in.
- Each customer's data walled off from every other customer's.
- Our people open customer data only when they need to help you or fix a problem.
- Keys and passwords are kept out of the code.
More detail is on our Data And Legal page at app.gradethebid.com/trust. No system is perfect. If a breach affects your data, we tell you as fast as we reasonably can and as the law requires.
Where Your Data Is Processed
The Service is built for businesses in the United States. We store your data in the United States and set AI processing to run in the United States. Stripe may process payment data in other countries under its own policy. If you use the Service from outside the United States, your data comes to the United States.
What Not To Upload
Upload public solicitations and your own company information only. Do not upload:
- Controlled Unclassified Information (CUI) or covered defense information
- ITAR or EAR technical data
- Classified information
- Government information from a contract you hold now
- Social Security numbers, bank account numbers, or health information
The Service is not built or authorized to hold that kind of data. If we find it, we may delete it.
Your Choices
- See, fix, download, or delete your data. Use your account settings or email admin@daltonrios.com. We answer within 30 days.
- Delete a job any time. Close your account any time by emailing us from your account email.
- Stop marketing. Use the unsubscribe link in any marketing email. Reply STOP to any text.
- No penalty. Using any of these choices never changes your price or your service.
- State privacy laws. Depending on where you live (for example California or Texas), you may have more rights, such as appealing our answer to a request. We honor those requests.
Children
The Service is for businesses and people 18 and older. We do not knowingly collect information from anyone under 18. If we learn we did, we delete it.
Changes To This Policy
For a big change, we email account holders and post a notice in the app at least 30 days before it takes effect. Small changes (like fixing a typo or naming a new provider) show up here with a new date.
Contact
Dalton Rios LLC, 30 N Gould St Ste N, Sheridan, WY 82801, admin@daltonrios.com.