1. Who we are
Mandra Bids is operated by Mandra 72nd LLC, a U.S. veteran-owned company.
For questions about this policy or about your data: support@mandrabids.com.
2. What we collect
Account and business information. Your name, work email, business name, the set-asides
you declare, your industries and states, your value ceiling, bonding limits, certificate expiry
dates and past performance entries you enter.
Work you do in the Service. Which notices are on your list, your pursue and skip
decisions and the reasons you record, your subcontractor shortlists, quotes, pricing sheets and
generated bid packages.
Subcontractor contact details. Business contact information only — firm name,
trade, business address, business telephone, business email, website — gathered from public sources
or entered by you.
Payment information. Handled entirely by Stripe. We store a customer
reference, a subscription reference and which plan you are on. We never receive or store card numbers.
Technical data. IP address, browser user agent, timestamps and request logs,
kept for security and for debugging.
Messages you send us. The name, email, company and message from the contact form,
and any correspondence that follows.
3. What we do with it
- Run the Service for you: pull notices, filter them to your profile, read documents you ask
to be read, and produce the outputs above.
- Bill you, and tell you about your subscription.
- Keep the Service secure: rate limiting, lockouts, and the audit trail.
- Answer your support requests.
- Meet legal obligations.
We do not sell personal information, and we do not use your content to market to anyone
else. We do not run advertising or third-party analytics on the application.
4. Legal bases (where UK or EU law applies)
Performance of our contract with you; our legitimate interests in securing and improving the
Service; your consent where we ask for it; and compliance with legal obligations.
5. Who processes your data
We use the following subprocessors. Each receives only what it needs.
What is never sent to an AI model: your pricing sheets, your quotes, your decisions
and your reasons, and your payment information.
Subcontractor discovery uses the Claude API’s own web search. It fetches public web pages;
no separate search or data-broker provider is involved. If that ever changes, this table
changes with it before the change ships.
6. Subcontractors who use a quote link
If a contractor sends you a Mandra quote link, you are using a page that belongs to that
contractor’s account.
What we collect from you: what you type into the quote form — your price, what
it covers, what it excludes, how long it stands, whether you will attend a site visit — and any
files you attach, plus your IP address and timestamps for security.
Who sees it: the contractor who sent you the link. Not other subcontractors,
and not other Mandra customers.
What you do not see: the contractor’s pricing, any other subcontractor, or anything
about the account beyond the one notice the link is for.
How long: the link expires when the solicitation closes, or sooner if the contractor
revokes it. Your submission is that contractor’s business record.
Removal: ask the contractor who sent you the link, or write to support@mandrabids.com and we will pass the request on and act
on our side.
The quote page carries its own short version of this notice.
7. How long we keep things
- Attachment files: deleted 30 days after a notice is over, unless the customer
pursued it, in which case they are kept as the file on a live bid.
- Extracted text, decisions and the audit trail: kept for as long as the account
exists. The audit trail is append-only by design and cannot be edited.
- Account data after a trial ends without converting: kept 30 days.
- Account data after cancellation: kept while the account exists; deleted on
request, subject to records we must keep for tax and legal reasons.
- Subcontractor records: deleted on request, together with their quotes.
- Logs: a short rolling window for security and debugging.
8. Your rights
Depending on where you live you may have the right to access, correct, delete or export your
data, to object to or restrict processing, and to complain to a regulator. California
residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or share personal information as those terms are defined.
Write to support@mandrabids.com. We will verify the request
and answer within the period the applicable law allows.
9. Security
What is encrypted, who at Mandra can reach production data, and how quote links are
protected is set out in detail on the security page.
10. Children
The Service is for businesses. It is not directed at anyone under 18 and we do not knowingly
collect their data.
11. International transfers
We are a U.S. company and our processors run in the United States. If you use the Service
from outside the U.S., your data is transferred there.
12. Changes
We will post changes here and update the date above. Material changes will be emailed to
account owners.
13. Contact
Mandra 72nd LLC — support@mandrabids.com