Template for the DozerDesk owner. Have a lawyer review this page before you take payment. It is not legal advice.

Privacy Policy

This draft describes what DozerDesk stores. Have a lawyer adapt it to the company that actually operates the service, including any state privacy notice you need.

Account data

We store the name, email, password hash, company name, teammate invites, and whether the email was confirmed. We do not store the raw password.

Qualification profile

We store the scopes, exclusions, yard address, radius, contract range, and target states the customer enters so we can score public notices.

Public bid data

Notices come from public procurement pages. We keep the fields printed there, a link back to the source, and a note about where each value came from.

Payments

Stripe processes cards. DozerDesk receives the customer id, subscription status, and price. We do not receive the full card number.

Email and cookies

We email verification links, password resets, digests, and qualified-bid alerts to the addresses on the account. A session cookie named dozerdesk_session keeps you signed in. It is HttpOnly. In production it is sent only over HTTPS.

Processors

Hosting is Vercel, the database is Neon, cards are Stripe, and email is Resend. An optional error tracker (Sentry) and an optional language-model provider see the slices of data needed to do those jobs. [Confirm this list with your lawyer.]

Retention and requests

Account data stays while the company is a customer and for a short period after, unless a longer period is required for tax or disputes. Write to support@dozerdesk.com to ask for a copy or deletion. [Add the response time your lawyer approves.]