Privacy Policy
Effective October 1, 2026.
This Privacy Policy explains what information (_______________) ("BidMaster60", "we", "us") collects when you use www.bidmaster60.com, how we use it, and the choices you have.
1. Information we collect
- Account information: your first and last name, company, your organization's address, the reason you gave for wanting an account, email address, phone number (optional), password (stored only as a secure hash), and the date you accepted the U.S. person and CUI statement, these Terms and this Policy.
- Billing information: card and bank account details are entered with and stored by our payment processor, not by us. We receive and keep only what we need to show and manage your billing, such as the card brand, the last four digits, the expiration date, the bank name, and your payment history.
- Company: the company you belong to on BidMaster60. Verified members of a company see the fleet, bids, price list and settings saved for it, and the name of whoever last changed the price list, turnaround standards or margins. The company owner sees members' names, emails and phone numbers.
- What you save: your fleet, bids, price list, turnaround standards, notes, checklists and other settings, and the records PDFs text and photos you upload.
- Sign-in and security data: sign-in times, one-time sign-in codes (stored only as a hash), session cookies, and your IP address for rate limiting and fraud prevention.
- Export screening records: the result of checking your name and organization against the U.S. Consolidated Screening List, and any decision an administrator recorded. The list is downloaded to our server, so your name is not sent to anyone to be checked.
- Records access log: which helicopters' records your account received or opened, the PDFs you opened or made, when, and the network address and country it came from. We keep this to show who has seen export-controlled records.
- Error reports: when something fails, your name, email, the page and the error are sent to our administrator so we can fix it.
We do not use advertising or third-party analytics trackers.
2. How we use it
To provide and secure the Service; approve and manage accounts; charge fees; send sign-in codes, verification, billing and service emails; answer your requests; fix problems; comply with export control and other laws; and enforce our Terms of Service. We do not sell your personal information.
3. Who we share it with
Only with service providers that run the Service for us, under their own security and privacy obligations: our hosting provider, our network and security provider (including its CAPTCHA), our email provider, and our payment processor. We may also share information when required by law, to respond to legal process, to protect our rights or the safety of others, or as part of a merger or sale of our business.
4. Cookies
BidMaster60 uses no analytics, advertising or tracking cookies. The first time you visit, a bar at the bottom of the page asks you to choose Accept all or Necessary only, or to set each kind under Manage preferences. It stays until you choose. You can change your choice at any time with Cookie preferences at the bottom of every page. Your choice is kept for 12 months, then we ask again.
| Kind | What it is | How long |
|---|---|---|
| Necessary Always on | bm60_session keeps you signed in. bm60_2fa carries you through the sign-in code step. bm60_consent remembers your cookie choice. The security check (CAPTCHA) on sign-up and sign-in and our network provider, Cloudflare, may set their own security cookies. The site also keeps a working copy of your saved numbers in your browser's storage so that nothing is lost while it saves. | Sign-in: until you sign out, or 14 days. Sign-in code: 10 minutes. Choice: 12 months. |
| Preferences Only if you allow them | Remembers, on this device, the page and section you were last on and which sections you keep open, and plays the welcome screen after you sign in (bm60_welcome). | Until you clear them or choose Necessary only. The welcome cookie lasts 2 minutes. |
| Analytics and advertising | Not used. |
When you pay, the payment form on our page is provided by Stripe, our payment processor. Your card or bank details go from your browser straight to Stripe. On payment pages Stripe sets its own cookies (for example __stripe_mid and __stripe_sid), which it uses to process the payment and to prevent fraud, under Stripe's privacy policy. They are necessary for paying online and are set only on pages where you pay. If you manage an existing membership, that is done on Stripe's own page.
5. How long we keep it
Accounts that are never verified are deleted after 7 days. We keep your account and saved data while your account is open. When you close your account we delete your private saved data, except billing and tax records and information we must keep to meet legal, export control or accounting requirements.
6. Security
We use encrypted connections, hashed passwords and sign-in codes, two-step sign-in, rate limits and access controls. No system is perfectly secure, so please keep your password and sign-in codes private.
7. Your choices
You can see and update your profile from your account. To get a copy of your data, correct it, or close your account and delete it, email admin@bidmaster60.com. We will respond within 30 days.
8. Children
The Service is not for anyone under 18, and we do not knowingly collect information from them.
9. Changes
We may update this Policy. If a change is material we will tell you by email or on the site.
10. Contact
(_______________)
(_______________)
admin@bidmaster60.com