Privacy Policy — JobBidders

1. Introduction and Scope

This JobBidders Privacy Policy ("Policy") describes how JobBidders LLC ("JobBidders," "we," "us," or "our") collects, uses, discloses, shares, stores, transfers, retains, deletes and protects your personal information when you access or use our Platform, including all websites, mobile applications, and related services (collectively, the "Platform"). This Policy is incorporated by reference into our Terms of Service.

This Policy is a notice of our data practices, not blanket consent to every form of processing. Some features require separate choices, notices, or authorization. Providing a phone number, accepting the Terms, or continuing to use the app does not itself authorize a background check, marketing texts, tracking that requires consent, or undisclosed AI training.

MATERIAL CHANGES ARE SUBJECT TO APPROPRIATE NOTICE AND ANY SEPARATE CONSENT REQUIRED BY LAW. CONTINUED USE DOES NOT RETROACTIVELY AUTHORIZE A NEW USE OF PREVIOUSLY COLLECTED PRIVATE INFORMATION.

This Policy applies to all Users, including Customers and Contractors, and covers all information collected through the Platform, including information collected when you create an account, use our services, communicate with other Users or us, interact with our websites or mobile applications, use third party login services, or otherwise interact with the Platform, in electronic messages between you and the Platform, or through any other means.

2. Information We Collect

2.1. Information You Provide Directly:

Account registration data (such as name, email address, phone number, and authentication information; email-and-password registration requires a selected home/street address to establish your saved location and support nearby job matching. We store the full address, derived ZIP code, general city/state location, and selected map coordinates in your private account record. The full home address is not shown on public profiles or job listings and is accessible only to you and authorized JobBidders staff. A separate general city/state label may appear on a profile. Apple or Google sign-in users may add or update an address later in Profile. A service address you separately provide for a job is stored with that job and, when provided, shared with the selected Contractor after bid acceptance.)
Profile information (biography, skills, service categories, profile photo, portfolio photos and videos, and other information you choose to include in your profile)
App Store or Google Play purchase information for digital Platform products, including product identifiers, transaction identifiers, subscription and entitlement status, and refund or revocation status; JobBidders does not store full payment-card numbers
Job postings, bids, bookings, and service requests
Messages and communications with other Users or with us, including photographs, videos, documents, attachments, and other User-generated content
Optional manual uploads of business or trade licenses and insurance certificates through the contractor- document feature; government-ID uploads are not accepted
Reviews, ratings, and feedback
Responses to surveys, promotions, or contests
Any other information you choose to provide
Optional AI inputs, saved suggestions, user-reviewed scope, and job/draft-linked technical usage records when you use those features, as described in Section 17

2.2. Information Collected Automatically:

Device information (device type, operating system, browser type and version, hardware model, unique device identifiers, internet service provider, device settings, and similar technical information)
Log data (IP address, access times, pages viewed, referring URLs, search queries, and other system activity information)
Usage data (features used, interactions, time spent on pages, clicks, and other behavioral data)
Location data used for nearby search and job matching, including an approximate area, ZIP code, city/state, search radius, or precise device/job location when you choose to provide it; exact job addresses are kept in restricted job records and shared with the accepted contractor rather than public browse listings
Cookies and similar tracking technologies (see Section 10), including other technologies used to recognize your device and improve the Platform
Transaction history and activity on the Platform
Metadata and technical information associated with content uploaded to or generated through the Platform.

2.3. Information from Third Parties:

If you opt in to optional Third Degree screening, your name, email address, and phone number are sent to Third Degree to create an invitation. JobBidders stores limited screening process and eligibility metadata, including provider and order references, components, policy version and jurisdiction overlay, operational state, eligibility outcome, permitted license details, consent version and time, and relevant timestamps. Provider responses may pass through our backend and may contain screening details transiently while the process is updated. JobBidders does not retain full report findings, identity documents, selfie images, biometric templates or measurements, detailed court records, or payment-card information.
Digital-purchase and entitlement information from Apple, Google, and RevenueCat
Name, email address, and profile image from Google or Apple when you choose those supported sign-in methods
Referral information if another User referred you to the Platform
Information from third party service providers, business partners, analytics providers, advertising partners, fraud prevention providers, authentication providers, and other third parties that support the operation of the Platform.

2.4. Business Accounts and Separate Contractor Records

JobBidders processes Platform account, job, conversation, safety, and support information for the purposes described in this Policy. Contractors separately handle information they obtain for their own business and job performance, including records outside the Platform; their own notices and legal obligations may apply. This Policy does not claim that the current app is a separate employee/customer-management system or

that all Platform processing is carried out only as a Contractor's data processor. For information JobBidders holds, you may contact us directly to exercise your rights; you are not required to route every request through a Contractor.

3. How We Use Your Information

We use collected information for the following purposes:

Providing, operating, maintaining, and improving the Platform and our services
Creating and managing your account and authenticating supported sign-in and account ownership; optional identity screening is separate and only through Third Degree if enabled and separately authorized
Facilitating connections between Customers and Contractors
Providing and reconciling digital subscriptions and boosts purchased through Apple App Store or Google Play; JobBidders does not accept, collect, hold, transmit, escrow, or process Customer-to-Contractor payments, including job charges, deposits, visit or estimate fees, milestone payments, or contractor invoice payments
Sending account, job, bid, message, and digital-purchase communications; contractor estimates, invoices, and user-recorded payment statuses are communication and recordkeeping features, not JobBidders payment processing
Sending marketing, promotional, and informational communications (with your consent where required)
Creating an optional Third Degree invitation after a signed-in Contractor separately opts in, and displaying "Screening Completed" only after all required components are current and JobBidders records an eligible outcome under its written policy
Enforcing our Terms of Service and other policies
Investigating and resolving disputes between Users
Responding to your inquiries and providing customer support
Complying with applicable laws, regulations, legal process, and government requests
Protecting the rights, property, and safety of the Platform, our Users, and the public
Personalizing your experience and delivering targeted content or advertising
Conducting internal analytics, research, and service improvement
Monitoring, detecting, preventing, and investigating fraudulent, unauthorized, illegal, or harmful activities and maintaining the security and integrity of the Platform
Verifying compliance with our policies, legal obligations, and eligibility requirements
Operating, administering, troubleshooting, testing, developing, and enhancing the Platform and its features
Providing AI-powered features, automated recommendations, content moderation, pricing guidance, and other functionality offered through the Platform
Creating aggregated, anonymized, or de-identified data for analytics, research, business intelligence, and service improvement, where permitted by applicable law
Facilitating business transactions, mergers, acquisitions, financing, reorganizations, or similar corporate events
Performing any other purpose described to you at the time of collection or otherwise permitted or required by applicable law.

We may share your information in the following circumstances:

Between Users: We share the profile and job information needed for the features you use. Job conversations and direct messaging between eligible accounts may be available through the app. Protected phone and email fields remain private before bid acceptance. After acceptance, the Customer and selected Contractor receive each other's phone numbers and email addresses. The exact job street address and access instructions, when provided, are shared with the selected Contractor. Unsuccessful bidders and unrelated accounts cannot access these protected contact and location details through the backend. Messages and documents you choose to share are visible to their intended participants. Information you voluntarily type into a message is visible to its recipients.
Service Providers: Firebase services support authentication, Firestore databases, file storage, server functions, push notifications, and App Check device attestation. Firebase Crashlytics receives crash reports and app diagnostics; custom operation reports use allowlisted flow, stage, and error-category metadata. Google AdMob provides advertising and its consent-management forms, and Google Maps Platform Places supports address autocomplete and location lookup. Apple App Store and Google Play process digital purchases; RevenueCat manages purchase and entitlement status. OpenAI processes the separately described optional AI requests and content safety screening. Transactional email is queued through Firebase Firestore and delivered through the Firebase Trigger Email extension configured for Resend SMTP; Firebase Authentication handles account sign-in. Third Degree handles optional screening directly if you separately choose and authorize it. These providers process information under their applicable terms and privacy notices and, where applicable, agreements with us.
AI Service Providers: OpenAI processes the text, selected job photographs, selected still frames where supported, and context needed for the requested AI feature. Context may include job title/category, description, approximate city/state or ZIP, earlier saved job analysis, and, for bid writing, the Contractor's name, company name, trades, and biography. Limits are those shown for the current feature, not a permanent photo allowance promised by this Policy. Visual AI does not receive the raw job clip or its soundtrack. Separate safety screening reviews shared content as described in Section 17. Information inside the selected text or image may be transmitted even if it should not have been included; do not assume automatic redaction.
Legal Requirements: When we believe disclosure is required or permitted by law, regulation, legal process, or governmental request; or to enforce our Terms; or to protect our rights, property, or safety or that of our Users
Business Transfers: In connection with or during negotiations of any merger, acquisition, asset sale, financing, or reorganization involving the Platform. Your information may be transferred as a business asset
Safety and Security: To protect against fraud, abuse, harassment, or other harmful activity on the Platform, including sharing with law enforcement when appropriate
Affiliates: With our parent companies, subsidiaries, and affiliated entities, subject to this Privacy Policy
Professional Advisors: With our attorneys, accountants, auditors, insurers, consultants, and other professional advisors where reasonably necessary for legal, business, compliance, or operational purposes.
Business Partners: With business partners, integration partners, and third parties that help provide features, services, promotions, or functionality you request through the Platform.
With Your Consent: For any other purpose with your explicit consent
Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you
To Establish, Exercise, or Defend Legal Claims: Where necessary to establish, exercise, or defend legal rights, investigate claims, resolve disputes, or enforce our agreements. This does not mean JobBidders collects contractor invoices, job deposits, or other payments owed between Users.

We do not exchange personal information for monetary payment from data buyers. Sharing with advertising partners can nevertheless qualify as a sale or sharing under some privacy laws; the applicable definitions and rights are not limited to cash transactions. Advertising practices and choices are described in Sections 9, 10, and 18.

However, we may share personal information for purposes such as analytics, advertising, or business operations as described in this Privacy Policy and as permitted by applicable law.

5. Background Checks and Identity Verification

Optional screening is available only to signed-in Contractors and requires a separate opt-in. Before JobBidders sends an invitation request, it tells the Contractor that their name, email address, and phone number will be sent to Third Degree to create the invitation and offers a way to cancel. JobBidders does not accept government-ID or biometric uploads through its app, collect screening payments, or add a duplicate screening checkout. Contractors provide any further information and authorization directly to Third Degree under Third Degree's own notices and privacy policy, and pay Third Degree directly. Third Degree may pay JobBidders referral compensation, separate from any contracted work. Accepting these general Terms or this Privacy Policy does not authorize a screening or consumer report.

Manual uploads through JobBidders' contractor-document feature are optional and limited to business or trade licenses and insurance certificates. Uploading does not verify validity, coverage, or qualifications. Do not upload driver's licenses, passports, government identity documents, Social Security numbers, or background reports to JobBidders. If you choose Third Degree screening, provide any further identity and screening information directly to Third Degree. An uploaded document or invitation/order status does not establish verification or job-specific licensing.

Before authorizing screening or paying, the Contractor sees the included services, verified current itemized price, possible additional fees, JobBidders' written eligibility policy, and privacy information. If current pricing cannot be verified, JobBidders stops the flow and does not create an order using stale or missing prices. Third Degree collects the screening payment and any further identity information or authorization through its secure site under its own notices and consent process. Third Degree may pay JobBidders referral compensation.

The standard scope includes 3DScomplete criminal-background screening, enhanced biometric identity verification, review under JobBidders' written eligibility policy, and professional-license verification when applicable. Other checks are excluded unless a separate policy is adopted. JobBidders uses the same current policy for every Contractor and considers legally permitted, standardized factors. Relevant criminal-history information, unresolved identity discrepancies, or applicable professional-license issues may affect eligibility. Paying for or completing screening does not guarantee the public label.

JobBidders stores limited process and eligibility metadata, such as user and order references, package components, policy version and jurisdiction overlay, operational state, eligibility outcome, permitted license details, and timestamps. The provider response may pass through our backend and may include details transiently while process status is updated. JobBidders does not retain full background reports, identity documents, selfie images, biometric templates or measurements, payment-card information, detailed court records, or individualized-assessment documents when Third Degree can retain them. Screening details are not placed in ordinary analytics, logs, push previews, or support tools.

If JobBidders considers withholding or removing the label based on screening information, JobBidders initiates the applicable adverse-action workflow. Third Degree generates and delivers required notices, provides the report and Summary of Rights, administers applicable waiting periods and disputes, and handles reinvestigation. A dispute pauses the decision. When required, JobBidders reviews the Contractor's individualized-assessment response under the written policy before making the final label decision; Third Degree delivers the final adverse-action notice through its system. No public failure indicator or reason is shown.

The only public screening label is "Screening Completed," displayed only after every required component is current and JobBidders records an eligible outcome after the required policy process. The label is neutral and does not guarantee identity, safety, licensing, qualifications, honesty, reliability, future conduct, or work quality. Screening-label eligibility is separate from marketplace access: a Contractor without the label may ordinarily keep an account, browse jobs, and bid. The policy and applicable notices describe component validity, renewals, jurisdictional overlays, and process rights.

We do not guarantee the accuracy, completeness, or reliability of any background check or identity verification performed by a third-party provider, and such checks should not be considered a guarantee of a user's identity, qualifications, trustworthiness, or future conduct.

6. Data Security

We implement commercially reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include encryption, access controls, secure servers, and regular security assessments, network monitoring, authentication measures, data backup procedures, employee access restrictions, and other industry standard safeguards appropriate to the nature of the information we process.

We also require, where appropriate, that our third-party service providers implement reasonable administrative, technical, and physical safeguards designed to protect the personal information they process on our behalf.

HOWEVER, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OF YOUR DATA.

You use the Platform and transmit information at your own risk. You are responsible for maintaining the secrecy of your account credentials. Please notify us immediately of any suspected unauthorized access to your account.

In the event of a security incident or data breach involving your personal information, we may notify affected individuals, regulators, or other authorities as required by applicable law.

To help protect our Platform and Users, we may monitor account activity for suspicious or unauthorized access, compromised credentials, unusual login patterns, fraudulent activity, or other security risks. Where appropriate, we may require password resets, temporarily suspend or restrict account access, confirm account ownership through supported authentication or recovery methods, or take other reasonable measures to protect user accounts and Platform security. This account-security process does not authorize a background check or create a government-ID upload route.

7. Data Retention

We retain your personal information for as long as your account is active, as needed to provide our services, or as required to comply with legal obligations, resolve disputes, enforce agreements, protect the security and integrity of the Platform, and fulfill the purposes described in this Policy.

Even after you delete your account, we may retain limited records required by law or reasonably necessary for fraud prevention, safety, security, disputes, auditing, or legal compliance. Moderation records may include a rejected submission or restricted evidence reference, reason codes, classifier signals, timestamps, correction-message versions, appeal details, and human reviewer actions. Access is limited to authorized staff. A small sample of allowed text may be retained for quality review; ordinary allowed content is not duplicated as moderation evidence. Sensitive evidence is not included in staff-alert emails. Records must be removed when their approved retention purpose expires, unless a legal preservation obligation applies.

Transaction records may be retained for a minimum period required by applicable tax and financial regulations. Reviews and ratings may remain visible even after account deletion unless we determine removal is appropriate.

When personal information is no longer required for the purposes described in this Policy, we will delete, anonymize, or securely dispose of such information, unless a longer retention period is required or permitted by applicable law.

Retention periods may vary depending on the nature of the information, the services provided, applicable legal requirements, contractual obligations, the resolution of disputes, the prevention of fraud or abuse, and other legitimate business needs.

Where reasonably practicable, we apply data minimization principles by collecting and retaining only the personal information that is reasonably necessary to provide the Platform, comply with legal obligations, resolve disputes, enforce our agreements, prevent fraud, maintain security, and fulfill the purposes described in this Privacy Policy. We periodically review our data retention practices and securely delete, anonymize, or de-identify personal information when it is no longer required for these purposes, unless a longer retention period is required or permitted by applicable law.

8. Your Privacy Rights and Choices

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data, subject to legal retention requirements and legitimate business purposes
Portability: Receive your data in a structured, commonly used, machine-readable format (where applicable)
Opt-Out of Marketing: Opt out of marketing and promotional communications at any time by using unsubscribe links or contacting us
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing of your data in certain circumstances
Withdraw Consent: Where we rely on your consent to process your personal information, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted before the withdrawal.
Opt-Out of Targeted Advertising and Profiling: Where required by applicable law, you may have the right to opt out of targeted advertising, the sale or sharing of personal information, profiling in furtherance of decisions that produce legal or similarly significant effects, or certain automated decision-making activities.
Appeal: Where provided by applicable law, you may have the right to appeal our decision regarding your privacy rights request.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights. To exercise these rights, contact us at support@jobbidders.app. We will respond within the timeframe required by applicable law. We may require verification of your identity before processing requests. Note that certain rights may be limited where we have a legal basis to retain or process your data.

Before processing requests to access, correct, delete, or otherwise exercise privacy rights, we verify the identity and authority of the requesting individual using appropriate existing account information, authentication, or the supported account-recovery process. JobBidders does not request government-ID uploads through its app or support messages for this purpose. Do not send government IDs to support. If we are unable to verify your identity or authority, we may decline or limit our response as permitted by applicable law and explain the available next steps.

For account deletion, use Profile > Delete Account in the app and reauthenticate with your sign-in provider. If you cannot access the app, follow the public account and data deletion instructions at jobbidders.app/delete-account.html or contact support@jobbidders.app. We delete account data and media after identity verification, anonymize shared marketplace records where possible, and retain only records needed for another participant, safety, disputes, fraud prevention, or a legal duty.

You may also designate an authorized agent to submit certain requests on your behalf where permitted by applicable law. We may require verification of both your identity and the authority of the authorized agent before processing such requests.

If you believe that our processing of your personal information violates applicable privacy laws, you may have the right to lodge a complaint with the applicable data protection or supervisory authority in your jurisdiction.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident and the CCPA/CPRA applies to the relevant processing, your rights may include knowing, accessing, correcting, and deleting personal information; opting out of a sale or sharing, including cross-context behavioral advertising; limiting certain uses of sensitive personal information; and non-discrimination for exercising applicable rights. Available rights and exceptions depend on the law, the processing, and the request. Other jurisdictions may provide similar rights as described in Section 8.

We do not exchange personal information for monetary payment from data buyers. That does not by itself mean that advertising disclosures fall outside the legal definitions of sale or sharing. We disclose advertising-partner processing in this Policy and must honor applicable opt-out choices and legally recognized preference signals for covered processing.

California residents may designate an authorized agent to submit requests on their behalf, subject to verification requirements under applicable law.

To submit a CCPA rights request, contact us at support@jobbidders.app.

10. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, scripts, and similar tracking technologies (including software development kits (SDKs), local storage technologies, and similar technologies) to collect information about how you use the Platform, to remember your preferences, to deliver personalized content and advertising, authenticate users, maintain security, and to analyze traffic and usage patterns. Some cookies are essential to the functioning of the Platform; others are optional.

For the mobile app, tracking and advertising choices may involve device operating-system permissions and the consent options presented by the relevant SDK, as well as applicable privacy rights requests to support@jobbidders.app. Browser cookie settings alone do not control all mobile SDK activity. Where consent is legally required for non-essential tracking, it must be obtained before that processing and remain withdrawable. Turning off optional AI is not an advertising opt-out. Providers' own policies also apply; their policies do not remove our responsibilities.

We may participate in interest-based advertising as described in this Policy and subject to applicable choices. Industry opt-out tools, including DAA/NAI tools where available, may be limited to the device or browser used and do not replace required in-app consent or legally available sale/sharing and targeted-advertising opt-outs.

The Cookie Policy section of our Terms and this Section together describe our use of cookies and similar technologies; JobBidders does not rely on a separate unpublished cookie policy.

11. Location Data

With your permission, we may collect precise geolocation data from your device to provide location-based services (such as matching you with nearby Contractors), verify service locations, improve search results, detect fraud, and enhance the functionality and security of the Platform. You can withdraw consent to location tracking at any time through your device settings.

We may also collect approximate location information derived from your IP address, Wi-Fi networks, Bluetooth signals, or other available technologies, where permitted by applicable law.

12. International Data Transfers

The Platform is operated from the United States. If you access it from another country, your information may be transferred to, stored, and processed in the United States or other countries whose data protection laws differ from those in your country of residence. Where applicable law requires a transfer mechanism or safeguards, we use the applicable lawful mechanism and appropriate contractual, technical, and organizational safeguards. Merely continuing to use the Platform is not treated as consent to a transfer for which separate consent is legally required. Contact support@jobbidders.app for applicable transfer information or to exercise your rights.

13. Third-Party Services and Links

Our Platform may contain links to or integrations with third-party websites, services, or applications. This Privacy Policy applies only to our Platform. We are not responsible for the privacy practices of third-party services and encourage you to review their privacy policies before providing any information. Our display of or linking to any third-party service does not constitute an endorsement.

Third-party services that you choose to access or use through the Platform may collect, use, and disclose your information in accordance with their own privacy policies and terms of service. We encourage you to review those policies before using such services.

14. Children's Privacy

JobBidders accounts are for adults aged 18 or older; the Platform is not directed to children. We do not knowingly permit minors to register or intentionally collect personal information directly from them through an account. Adult-uploaded photos, videos, or messages can incidentally include another person's information; avoid unnecessary information or images of minors and obtain any required rights and permissions. If we learn of an unauthorized minor account or improperly collected child information, we will investigate and take appropriate deletion or other steps under applicable law. Contact support@jobbidders.app to report a concern.

If we learn that a parent or legal guardian has notified us that a child has provided personal information without appropriate authorization, we will take reasonable steps to investigate and delete such information, subject to applicable law.

15. SMS and Text Message Communications

Providing a phone number for account contact or sharing it with an accepted job participant is not, by itself, consent to promotional texts from JobBidders or a Contractor. If JobBidders offers SMS, we obtain any required purpose-specific consent and explain the program and opt-out options before enrollment. Marketing consent, where required, is separate from necessary account or job communications and is not a condition of ordinary marketplace use.

If an SMS program is enabled, its disclosed purposes, message frequency or variability, sender, and opt-out instructions apply. Message and data rates may apply. Use its STOP instructions or support@jobbidders.app to withdraw enrollment; required service or legally mandated communications are handled as permitted by law. This Policy does not promise that every listed type of SMS is available. Contractors' direct texts are their responsibility and remain subject to applicable consent and communications law.

16. Changes to This Privacy Policy

We may update this Policy and will identify the revised date and effective date. Material changes require appropriate notice through the app, email, or another suitable method, with advance notice and separate consent where applicable. An update is not permission to retroactively broaden the purposes for which previously collected private information was provided, including training an AI model.

CONTINUED USE DOES NOT SUBSTITUTE FOR SEPARATE CONSENT OR AUTHORIZATION REQUIRED BY LAW. APPLICABLE RIGHTS AND PRIOR PRIVACY COMMITMENTS REMAIN SUBJECT TO LAW.

We encourage you to review this Policy periodically.

To the extent required by applicable law, we will obtain your consent before implementing material changes that require your consent.

17. AI Tools and Automated Processing

Before using content features that send information to OpenAI, the app presents a separate AI-processing notice. JobBidders records the notice version, language, and acceptance time. If you do not accept, you can still view privacy information and use account-deletion options, but you cannot submit content to features that require OpenAI processing. This notice does not authorize model training. Provider processing, retention, and applicable privacy choices are described below.

JobBidders uses OpenAI for optional job-description, photo-analysis, Price Insight and bid-writing assistance, and for separate safety screening of submitted jobs, photos, job videos, public profile content, bids, shared questions, reviews, messages, and estimate/invoice/change-request content. For job-video safety screening, we extract up to 15 sampled still frames and send them to OpenAI for image screening. When a video contains audio, we extract and send its audio track to OpenAI to create a transcript, then send the transcript to OpenAI for text screening. The raw video clip is not sent to OpenAI. The extracted audio and transcript are not used to generate job descriptions, photo insights, or price estimates; the uploaded video, including its sound, remains available for playback only to authorized job participants when otherwise permitted. Optional AI analysis can be declined; safety screening of shared content remains separate. Dedicated private address/contact fields and restricted identity/background-screening documents are excluded from the general AI reviewer. This does not automatically remove a phone number, address, person's face, voice, or other information that you place inside text or media. Do not include unnecessary sensitive information in AI inputs. Third Degree screening uses its own notices and authorization, not the optional job AI flow.

AI providers process the disclosed inputs and outputs under their applicable service terms, security measures, and data-protection arrangements. Automated content screening may return a correction request, hold content for review, or apply temporary, action-specific restrictions. Permanent moderation suspensions and appeals require human review. General-purpose job AI does not receive Third Degree report findings and is not used to make screening decisions. Applicable notices and dispute rights remain governed by Third Degree's process and applicable law.

We may provide AI-powered features such as AI-generated job descriptions, photo analysis, pricing guidance, bid writing assistance, content recommendations, and similar functionality.

Optional AI inputs can include descriptions, selected photographs, approximate city/state or ZIP, categories, relevant project facts, prior saved job intelligence, and, for bid writing, the Contractor's name, company name, trades, and biography. Optional job AI does not analyze uploaded videos or their soundtracks. An accepted clip can still be available to authorized people for playback with recorded sound when optional AI is declined or unavailable. We transmit content reasonably needed for the selected feature, not all account records. Choosing a feature does not grant permission for unrelated processing or model training.

Provider training and retention. OpenAI states that API data is not used to train or improve its models by default unless the API customer opts in. Our general Terms do not authorize opt-in model training on identifiable private User Content. Provider retention varies by endpoint and approved controls; OpenAI's default abuse-monitoring logs may include prompts and responses and be retained for up to 30 days, or longer for legal or harm-prevention reasons. We do not promise zero provider retention. Any different training use requires a distinct advance disclosure and a lawful basis, including consent where required.

Declining optional AI prevents that optional request, not separately required safety processing or retention of earlier saved records. Saved inputs, results, and technical records are covered by Sections 7 and 8. Account deletion or deleting a draft is not a promise that every provider log or lawfully retained record disappears immediately. Public or participant-visible job content and suggestions are shared only through the authorized feature; private screening and assessment information is not included.

AI output can be inaccurate, incomplete, or outdated. Price Insight is labor-only planning guidance, excluding parts and materials; it is not a Contractor quote, invoice, safety clearance, or payment obligation. Photo suggestions are not a physical inspection or professional diagnosis. Review and correct suggested titles, scope, assumptions, and bid content before sharing or relying on them. A Contractor's deliberately authored bid may separately include materials and other agreed charges.

We retain original customer intake, saved AI suggestions, and customer-reviewed scope separately for review, recovery, and authorized reuse, linked to the relevant persistent job or draft. Technical records may

include request/result identifiers, timestamps, entitlement events, clip duration and file size, sampled-frame counts/timestamps, processing time, model-token usage, and reported playback events. Cost/delivery figures are estimates unless reconciled with provider billing. These usage records do not include the clip soundtrack or dedicated private address/contact fields. Earlier saved analysis may be reused in an authorized job view to avoid unnecessary duplicate processing, not relabeled as analysis of another job. Retention and deletion limits in Sections 7 and 8 apply.

We may temporarily suspend or limit access to AI-powered features where we reasonably believe such features are being misused, including through automated abuse, excessive usage, fraud, prompt manipulation, spam, or other activity that threatens the integrity, security, or operation of the Platform.

18. Do Not Track Signals

Some web browsers can send a Global Privacy Control (GPC) signal. The current JobBidders mobile app does not read browser GPC signals, and the current website does not serve advertisements. In the mobile app, advertising privacy choices are presented through Google’s consent-management flow; iOS tracking permission is requested separately through App Tracking Transparency. These controls are not a substitute for any other privacy right. If JobBidders adds advertising to a web surface that receives GPC, we will honor the signal where required before that surface shares data for targeted advertising. You may also contact support@jobbidders.app to exercise applicable sale, sharing, or targeted-advertising opt-out rights.

If you choose a supported Google or Apple sign-in method, we may receive your name, email address, profile image, and information you authorize that provider to share. The information received depends on the sign-in method and your settings with the provider.

If you sign in with Google, we receive information such as your name, email address, and profile picture from Google. If you sign in with Apple, we receive your name and email address; if you use Apple's "Hide My Email" feature, we receive a private relay email address instead of your personal email address. Email/password authentication is handled by Firebase Authentication; JobBidders does not store your password in its profile database. We never receive or store your password for a third-party login provider.

This section applies to you if you are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland. For the purposes of the EU General Data Protection Regulation and the UK General Data Protection Regulation (together, the "GDPR"), the data controller of your personal information is JobBidders LLC, whose contact details are set out in the Contact Us section below.

We process your personal information only where we have a valid legal basis to do so, including: (a) performance of a contract where processing is necessary to provide the Platform and our services to you, such as creating and managing your account, facilitating connections between Customers and Contractors, enabling communications, and providing store-purchased digital entitlements; (b) legitimate interests where processing is necessary for security, fraud prevention, safety moderation, analytics, and service improvement, provided those interests are not overridden by your rights and freedoms; (c) consent, for example, for opted-in AI analysis, precise geolocation, marketing communications, and non-essential

cookies; you may withdraw consent at any time; and (d) legal obligation where processing is necessary to comply with applicable law.

In addition to the rights described in Section 8, if you are in the EEA, the UK, or Switzerland you have the right to: access and obtain a copy of your personal information; rectify inaccurate or incomplete information; request erasure of your personal information; restrict or object to our processing (including the absolute right to object at any time to processing for direct marketing purposes); receive your personal information in a structured, commonly used, machine-readable format and have it transmitted to another controller (data portability); withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal; and not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects concerning you, except as permitted by applicable law.

You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement. When we transfer your personal information outside the EEA, the UK, or Switzerland, we do so in accordance with Section 12 (International Data Transfers), relying on appropriate safeguards such as the European Commission's Standard Contractual Clauses or other legally recognized transfer mechanisms.

21. Biometric Information

JobBidders does not request government-ID uploads or biometric identity templates through its app. Optional manual credential uploads are limited to business/trade licenses and insurance certificates. Ordinary profile or job photographs may contain faces; JobBidders does not use those photographs for biometric identity authentication. Do not upload government IDs or submit them in support messages.

If optional Third Degree verification is enabled, any identity documents or biometric information required by the provider are submitted directly through its separate process and governed by its applicable notices, authorization, and legal requirements. JobBidders does not accept new government-ID or biometric uploads through its app. Disabling uploads does not by itself establish that older records have been deleted; any previously retained information must be handled under applicable retention, deletion, and legal-hold requirements.

The actual provider data flow, notices and authorization, deletion and retention requirements, and applicable consumer-report and biometric privacy obligations must govern any offered screening process. General acceptance of this Policy is not biometric or background-check authorization. Review the provider notice presented before any verification you separately choose.

22. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: JobBidders LLC Email: support@jobbidders.app.