BidRebel Privacy Policy
Version: 6.11 Effective Date: September 30, 2026 Last Updated: September 30, 2026
1. Introduction
BidRebel Inc. ("BidRebel," "we," "us," or "our") operates an online marketplace that connects customers with contractors.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when individuals:
- Visit our websites or use our applications;
- Join our waitlists or invite lists;
- Create customer accounts;
- Apply for or maintain contractor accounts;
- Participate in bidding opportunities;
- Rate or review other users, or are rated or reviewed by others;
- Communicate with us or with other users through our platform; or
- Otherwise interact with BidRebel.
This Privacy Policy applies to customers, contractors, prospective contractors, referred individuals, website visitors, and other individuals whose information we process. For a categorized summary of the personal information we collect and how we use and disclose it, see "U.S. State Privacy Notice" below.
2. Information We Collect
A. Information You Provide Directly
We may collect:
Customers
- Name
- Email address
- Phone number
- Property address
- Project descriptions
- Project budgets
- Payment information
- Photos, videos, and documents uploaded in connection with projects
- Ratings, reviews, and feedback
- Communications with contractors or BidRebel
Contractors
- Name
- Business name
- Business logo
- Business address
- Email address
- Phone number
- License information
- Insurance information
- Tax information required for payment processing (see "Tax Information" below)
- Application materials
- Background-check authorization information
- Ratings, reviews, and feedback you provide
- Communications with customers or BidRebel
Waitlist Participants
- Name
- Email address
- ZIP code
- Referral information
Payment Information. Payment information and payment transactions are processed by our payment provider(s). We do not store full payment card numbers or bank account credentials.
Tax Information. Tax and identity information required by our payment provider (such as taxpayer identification information, W-9 information, and information used for 1099 reporting) may be collected directly by the payment provider through its onboarding flow. BidRebel may receive account status, verification status, tax-reporting status, and related identifiers, but does not store full payment credentials or taxpayer-identification numbers in its own systems unless otherwise stated at the point of collection. Any tax-related information we do handle is subject to the retention and security measures described in this Policy.
B. Information We Receive From Others
We may receive information from:
Payment Providers
We use payment providers to facilitate payments. BidRebel collects Customer payments on behalf of Contractors as their limited payment-collection agent (agent of payee), as described in our Terms of Service and Contractor Terms; the payments themselves are processed by our payment provider(s). We may receive transaction confirmations, account status information, and related payment data.
Background Check Providers
We may receive screening results, eligibility determinations, status information, and related information from screening providers in connection with optional Background Checks and related trust-and-safety decisions, whenever a contractor initiates a Background Check.
Referrals
Anyone may refer a contractor or customer to BidRebel. From the referring individual, we may receive the referred person's name, business name (where applicable), email address, and phone number.
Before we use a referred person's contact information to send marketing communications or text messages, we obtain any consent required by applicable law directly from that person. We do not send text messages to a referred person based solely on a referral; mobile messaging requires that person's own opt-in.
Service Providers
We may receive information from analytics, customer support, communications, identity verification, and fraud prevention providers.
C. Automatically Collected Information
We may collect:
- Device information
- Browser type
- Operating system
- IP address
- Usage activity
- Session information
- Referral URLs
- Approximate location derived from IP address
- Information collected through cookies and similar technologies (see "Cookies, Tracking, and Advertising" below)
D. Sensitive Personal Information
Some of the information described above may be treated as "sensitive personal information" under certain state privacy laws. Examples include taxpayer identification information, background-check information, precise location information (including location metadata embedded in uploaded photos), payment account information, and identity-verification information.
We use and disclose sensitive personal information only as reasonably necessary to provide the services, verify contractor eligibility, process payments, meet tax and legal-compliance obligations, maintain safety and security, and prevent fraud, and otherwise only as permitted by applicable law or with any notice and rights the law requires. We do not use sensitive personal information to infer characteristics about you unless we provide any notice and rights required by law. Where applicable law provides it, you may have the right to limit our use and disclosure of sensitive personal information, as described in "Your Privacy Rights."
3. Photos, Documents, and Project Content
Users may upload photos, videos, documents, and project-related content.
Uploaded files are stored as uploaded and may contain embedded metadata, such as precise location (GPS) information, device identifiers, and capture timestamps. We retain that metadata as part of the original file and may use it to verify project information (for example, to help confirm that a project or photograph corresponds to the stated project location), to prevent fraud, to maintain safety and security, and to operate and improve the platform. Where embedded metadata includes precise location information, we treat it as sensitive personal information as described in "Sensitive Personal Information" above.
Where technically feasible, the copies of uploaded images displayed to other users in the application are processed using automated processes designed to remove such embedded metadata before display. These processes apply to the displayed copies, not to the stored originals, and may not remove all metadata from all file types, including videos, documents, or files processed by third-party tools.
Uploaded content may be used to:
- Operate the marketplace;
- Facilitate contractor bidding;
- Support customer service;
- Investigate disputes;
- Improve platform functionality;
- Meet legal obligations.
4. How We Use Information
We may use information to:
- Operate the marketplace;
- Match customers and contractors;
- Process payments;
- Verify contractor eligibility;
- Conduct background checks;
- Operate ratings, reviews, and trust-and-safety features;
- Communicate with users, including by email and, where you have consented, by text message;
- Provide, personalize, and measure advertising, including targeted advertising where permitted;
- Prevent fraud and abuse;
- Enforce our Terms of Service;
- Maintain marketplace trust and safety;
- Comply with legal obligations;
- Analyze platform performance;
- Provide support;
- Improve services.
We use sensitive personal information only as described in "Sensitive Personal Information" above.
5. Contractor Screening
BidRebel offers contractors an optional background check, conducted by a third-party screening provider and paid for by the contractor; contractors who complete and clear it receive a badge on their profile indicating that a background check was conducted and cleared as of the date of the result. Completing a background check is not required to submit bids. BidRebel may also conduct or require license verification, insurance verification, identity verification, or other trust-and-safety checks where appropriate or permitted by law.
Where required, background checks are governed by separate disclosures, authorizations, notices, and dispute procedures presented through the screening provider's flow when the contractor initiates a Background Check, consistent with the Fair Credit Reporting Act (FCRA) and other applicable law. This Privacy Policy does not replace those standalone notices and authorizations. We may access screening information through the screening provider as needed to make contractor eligibility decisions, and we limit the screening information we store in our own systems to what we need to operate the platform and meet legal requirements.
Background reports are not publicly available.
6. Ratings, Reviews, and Accountability Notices
To support transparency and trust and safety on the marketplace, BidRebel offers ratings and reviews, and may publish notices about platform activity. These features may apply to any user of the platform, including both customers and contractors.
Ratings and reviews. Users may rate and review other users based on their experiences on the platform. Ratings, reviews, and any responses may be visible to other users (including prospective customers and contractors) and may be displayed on profiles and in search results. Reviews reflect the views of the users who submit them and do not reflect the views of BidRebel.
Accountability notices. Accountability notices are limited to objective, platform-recorded events, such as a confirmed cancellation after acceptance, a documented failure to appear for a scheduled appointment, or a dispute that was abandoned. We do not publish subjective conclusions in accountability notices. Accountability notices are associated with the relevant user's account and may be visible to a counterparty in a transaction and, where applicable, on the user's profile.
Accuracy, correction, and review. If you believe a rating, review, or accountability notice about you is inaccurate, you may request review, correction, or removal by contacting us at support@bidrebel.com. We will evaluate such requests and will correct or remove information consistent with applicable law and our Terms of Service. Accountability notices are subject to periodic review and expiration as described in our Terms of Service. BidRebel may retain factual historical records as reasonably necessary to preserve marketplace integrity and to meet legal obligations.
The detailed rules governing eligibility to post, the categories and duration of accountability notices, and dispute handling are described in our Terms of Service.
7. Information Sharing
We may disclose information as described below.
With Contractors (Project Information)
BidRebel uses a bidding process. The information a contractor can see depends on the stage of that process:
- Before a contractor is selected, we may share limited project information needed to evaluate and bid on a job, such as the project description, uploaded project content, approximate location or service area, requested timing, and budget information.
- After a contractor is selected, we may share additional information needed to schedule and perform the project, such as the full service address, contact and scheduling details.
- We do not share, as part of the bidding process, payment credentials, SMS opt-in status, tax information, background-check reports, or unrelated account information.
With Customers
Contractor profile information may be shared with customers evaluating bids.
With Other Users and the Public
Profile information, ratings, and reviews may be visible to other users and, where applicable, to the public, as described in "Ratings, Reviews, and Accountability Notices" above.
With BidRebel Personnel
Authorized BidRebel personnel may access user information to operate the marketplace, provide customer support, investigate disputes, prevent fraud and abuse, and meet legal and compliance obligations. We limit such access to personnel with a legitimate operational need, and we maintain administrative and technical controls intended to keep access proportionate to that need. Access to high-sensitivity payment identifiers is subject to additional controls, including a recorded business reason, as described in the Security section below.
BidRebel administrative staff may access, view, and correct account information (including but not limited to name, email address, phone number, mailing address, and service details) for support, fraud-prevention, and operational purposes. If you believe your account information was changed without your authorization, contact us immediately at privacy@bidrebel.com.
With Service Providers
We may disclose information to vendors providing hosting, analytics, customer support, communications, payment processing, fraud prevention, and identity verification. We require service providers to process personal information only for the services they provide to us and subject to appropriate confidentiality, security, and use restrictions.
With Advertising Partners
We may share certain information, such as device identifiers and online activity, with advertising and analytics partners to deliver and measure advertising, including targeted advertising. The categories of recipients may include advertising networks, analytics providers, measurement providers, social media platforms, and cookie or pixel providers. Depending on your state of residence, this activity may be considered a "sale" or "sharing" of personal information. You may opt out as described in "Your Privacy Rights" and "Cookies, Tracking, and Advertising" below.
Text-Message (SMS) Information
We do not sell or share your mobile phone number or your SMS opt-in or consent information, and we do not share that information with third parties or affiliates for their own marketing or promotional purposes. We share it only with vendors that help us deliver our own messages to you, such as our messaging platform and telecommunications providers. All of the sharing categories described in this Privacy Policy exclude text-messaging opt-in data and consent; this information will not be shared with any third parties for marketing or promotional purposes.
Legal Requirements
We may disclose information when required by law or when reasonably necessary to comply with legal obligations, protect rights or property, investigate misconduct, or respond to lawful requests.
Corporate Transactions
Information may be disclosed during mergers, acquisitions, financing events, asset sales, or reorganizations.
8. Cookies, Tracking, and Advertising
We and our service providers use cookies, pixels, software development kits (SDKs), and similar technologies to operate the platform, remember your preferences, analyze usage, and support advertising. These technologies generally fall into the following categories:
- Essential: required to operate the platform and provide core features;
- Analytics and performance: help us understand how the platform is used so we can improve it;
- Advertising: used to deliver and measure advertising, including targeted advertising.
You can control many cookies through your browser settings. Disabling certain cookies may affect the functionality of the platform.
Advertising. We may use information about your activity to deliver and measure advertising, including targeted advertising (sometimes called cross-context behavioral advertising) and advertising delivered through third-party partners such as advertising networks, analytics and measurement providers, social media platforms, and cookie or pixel providers. Depending on your state, the use or disclosure of personal information for targeted advertising may be treated as a "sale" or "sharing" of personal information.
Your advertising choices and opt-out preference signals. You may opt out of targeted advertising and of the sale or sharing of your personal information through the "Do Not Sell or Share My Personal Information" link in our website footer, through our cookie preference tool, or by contacting us at privacy@bidrebel.com. Where required by applicable law, we recognize and process qualifying universal opt-out mechanisms, including the Global Privacy Control (GPC).
9. Text Messaging (SMS)
With your consent, BidRebel may send you text messages, such as account and security notifications, bidding and project updates, appointment reminders, and (where you have separately opted in) promotional messages. Sender: BidRebel Inc.
- Consent. We send text messages only to individuals who have opted in to receive them. We obtain consent directly from you, and we do not purchase, rent, sell, or otherwise obtain phone numbers from third parties for messaging. Consent to receive text messages is not a condition of using BidRebel. The consent language presented to you at opt-in governs the messages you will receive.
- Message frequency. Message frequency varies depending on customer and contractor activity on the platform.
- Message and data rates. Message and data rates may apply.
- Revoking consent and getting help. You may revoke your consent and opt out at any time by replying STOP to any message, or by contacting us through any other reasonable method, including by email at privacy@bidrebel.com or through customer support. Reply HELP to any message for help, or contact us at the same addresses.
- Records of consent. We maintain records of consent, which may include the date and time of opt-in, the phone number, the consent language presented, and the collection point or form used.
- No third-party sharing of opt-in data. We do not share or sell your mobile phone number or your SMS consent or opt-in status with third parties or affiliates for their marketing or promotional purposes. We share this information only with vendors that help us deliver our messages to you.
10. Data Retention
We retain personal information only as long as reasonably necessary. Typical retention periods include:
| Category | Retention |
|---|---|
| Waitlist records | 12 months |
| Contractor referrals with no engagement | 12 months |
| Contractor applications not approved | 24 months |
| Customer support records | 36 months |
| Background-check compliance records | As required by applicable law |
| Transaction records | 7 years |
| Tax records | 7 years |
| Closed account records | Up to 7 years |
| Authentication and access-attempt logs | 24 months |
| Compliance audit records | 7 years |
| Ratings, reviews, and accountability notices | Accountability notices displayed up to 12 months; underlying records retained up to 7 years |
| Uploaded project content (photos, videos, documents) | Life of the project plus up to 7 years |
| Fraud-prevention records | As reasonably necessary |
Litigation holds and legal obligations may extend retention periods.
11. Security
We maintain administrative, technical, and organizational safeguards designed to protect personal information.
We limit access to personal information to authorized personnel with an operational need. Access to high-sensitivity payment identifiers (such as the account identifiers assigned by our payment providers) requires additional authentication and is recorded in our internal audit records, including the identity of the person who accessed the information and the business reason for the access.
If we are required by law to notify you of a security incident involving your personal information, we will do so in accordance with applicable law.
No system is completely secure. We cannot and do not guarantee absolute security.
12. Deidentified and Aggregated Information
We may create deidentified or aggregated information that cannot reasonably be used to identify you. We maintain and use such information only in deidentified or aggregated form and will not attempt to reidentify it except as permitted by applicable law.
13. Your Privacy Rights
Depending on your jurisdiction, you may have rights to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete personal information;
- Receive a portable copy of your information;
- Opt out of targeted advertising;
- Opt out of the sale or sharing of your personal information;
- Limit the use and disclosure of sensitive personal information, where applicable;
- Obtain a list of the specific third parties to which we have disclosed your personal information, where required by applicable law;
- Opt out of certain profiling that produces legal or similarly significant effects;
- Appeal a decision we make about a privacy request.
How to exercise your rights. To exercise any of these rights, contact us at privacy@bidrebel.com. To opt out of targeted advertising or the sale or sharing of personal information, you may also use the "Do Not Sell or Share My Personal Information" link in our website footer or our cookie preference tool. Where required by applicable law, we recognize and process qualifying universal opt-out mechanisms, including the Global Privacy Control (GPC).
Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization, and we may require you to verify your identity directly with us before we act on the request.
Verification and non-discrimination. We may verify your identity before fulfilling a request. We will not discriminate against you for exercising your privacy rights.
Limits on deletion and other requests. We may decline or limit a request where retention or use of the information is permitted or required by law, for example to comply with legal or tax obligations, complete transactions, prevent fraud, maintain security and safety, resolve disputes, preserve marketplace integrity, or maintain required records. If we deny a request, you may appeal, and our response will explain how.
14. State Privacy Rights
Residents of some U.S. states have additional rights regarding their personal information under applicable state privacy laws. The specific rights available to you depend on your state of residence and may include the rights described above.
BidRebel honors the privacy rights that apply to you under applicable U.S. state privacy laws. To exercise any of these rights, or to appeal a decision about a request, contact us at privacy@bidrebel.com.
15. U.S. State Privacy Notice
Some state privacy laws require us to describe our practices using specific categories of personal information. The categories and examples below are not exhaustive and may overlap with one another.
| Category of Personal Information | Examples | Sources | Purposes | Categories of Recipients | Sold or Shared? | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Name, email, phone, mailing/property address, IP address, account identifiers | You; referrals; service providers; automatic collection | Operate the marketplace; accounts; communications; security and fraud prevention | Service providers; other users (as applicable); legal/regulatory | Online identifiers/activity may be shared for targeted advertising; other identifiers are not sold or shared | See Data Retention |
| Account and profile information | Business name, license, insurance, profile details | You; verification providers | Eligibility; matching; profiles; trust and safety | Other users; service providers | No | See Data Retention |
| Commercial / transaction information | Project descriptions, bids, budgets, transaction records | You; payment providers | Operate the marketplace; process payments | Counterparties; payment and service providers | No | Transaction records: 7 years |
| Payment information | Payment data processed by payment providers (we do not store full card/bank credentials unless stated) | You; payment providers | Process payments | Payment providers | No | See Data Retention |
| Internet / network activity | Usage activity, device and browser data, cookie data | Automatic collection | Analytics; security; advertising | Analytics and advertising partners | Yes; may be a "sale" or "sharing" for targeted advertising | See Data Retention |
| Location information | Approximate location from IP; property/project address; precise location metadata embedded in uploaded photos | You; automatic collection | Matching; service delivery; project-location verification; fraud prevention | Selected contractors (address after selection); service providers | No | See Data Retention |
| Audio / visual information | Photos, videos, and documents you upload, including embedded metadata | You | Bidding; support; dispute investigation; project-location verification; fraud prevention | Contractors (project content, with metadata removed from displayed copies where technically feasible); service providers | No | See Data Retention |
| Professional / licensing information | Contractor license, insurance, business information | You; verification providers | Eligibility; trust and safety | Customers (profile); service providers | No | See Data Retention |
| Sensitive personal information | Taxpayer identification information; background-check information; payment account information; identity-verification information; precise location metadata embedded in uploaded photos | You; background-check, verification, and payment providers | Eligibility; payment and tax compliance; fraud prevention; security; legal compliance | Payment, background-check, and verification providers; tax/regulatory authorities as required | No | As required by law / See Data Retention |
| Inferences | Limited inferences used for service functionality and security | Derived from the above | Service functionality; security | Service providers | No | See Data Retention |
Notice at Collection. We provide a notice at or before the point at which we collect personal information. Short-form notices are presented at key collection points (including customer account creation, project posting, contractor application, referral submission, SMS opt-in, and our cookie/advertising banner or website footer) and each links to this Privacy Policy.
16. Children
BidRebel is not intended for persons under 18 and does not knowingly collect personal information from children. Because uploaded project content could include images of other people, you should not upload images of children unless reasonably necessary for the project and you have the authority to do so.
17. International Users
BidRebel primarily operates within the United States.
Individuals accessing our services from outside the United States understand that their information may be processed and stored in the United States, which may have data-protection laws that differ from those in their country of residence.
18. Changes to this Policy
We may update this Privacy Policy periodically.
Material changes will be communicated through reasonable means, including website notices or direct communications when appropriate, and where required by applicable law we will provide notice and obtain consent before applying materially different practices to previously collected information.
19. Contact Us
BidRebel Inc. 7523 95th St S #321 Cottage Grove, MN 55016