Privacy Policy

1. Introduction

CurbBid Inc. (“CurbBid,” “we,” “us,” or “our”) is a Delaware C-corporation based in Texas that operates the CurbBid platform at curbbid.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and platform.

CurbBid serves two types of users: contractors who create authenticated accounts to manage their business, and customers who access estimates, invoices, and payment pages via public token URLs without creating an account.

2. Information We Collect

Information You Provide

• Contractor accounts: Name, email address, password, or Google OAuth credentials (name, email, profile image)
• Business profiles: Business name, address, phone number, email, and logo
• Customer records: Name, address, phone number, and email as entered by contractors
• Estimate acceptance: Typed name, consent text, and related signature data under the ESIGN Act
• Waitlist and demo signups: Name, business name, email, and phone number
• Referral program: Referral codes and associated contact information

Information Collected Automatically

• IP address, browser type, operating system, and user agent
• Session data and authentication tokens
• Estimate and invoice view timestamps and activity logs
• Product analytics via PostHog (only with your consent)

Information from Third Parties

• Google OAuth: Name, email address, and profile image when you sign in with Google
• Stripe: Payment status and transaction identifiers. We never receive or store your full credit card numbers.

3. How We Use Your Information

• Operating and improving the CurbBid platform
• Processing payments through Stripe, including the applicable platform fee
• Sending transactional SMS messages via Twilio and emails via Resend on behalf of contractors
• Authenticating users and managing sessions
• Maintaining ESIGN Act compliance records (signer identity, IP address, user agent, timestamp, document hash, consent text, and line item snapshots)
• Analyzing product usage via PostHog (consent-gated)
• Preventing fraud and abuse
• Communicating product updates, launch information, and support

4. How We Share Your Information

We do not sell, rent, or share your personal data — including your phone number — with third parties for their marketing purposes. We may share information with the following parties solely to operate the Service:

• Service providers: Stripe (payments), Twilio (SMS), Resend (email), Convex (database and backend), Turso (authentication database), Google (OAuth) and PostHog (analytics)
• Contractor–customer sharing: Contractors can view customer information they have entered. Customers can view contractor business information on estimates and invoices shared with them.
• Legal requirements: When required by law, regulation, legal process, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

5. Cookies and Tracking

On our marketing site (curbbid.com) we use three categories of cookies and similar technologies:

• Necessary cookies that keep the site working and remember your consent choice. Always on.
• Product analytics from PostHog so we can understand which pages and features are useful and where the site needs improvement.
• Marketing & retargeting via the Meta Pixel so we can show relevant CurbBid ads to people who have visited the site on Facebook and Instagram.

Analytics and marketing cookies are on by default under our implied-consent model, and you can turn either category off at any time. Use the “Cookie Preferences” or “Your Privacy Choices” link in the footer of any page, or see the Cookie Policy for the full list of cookies and durations. The CurbBid application at app.curbbid.com uses its own authentication and payment cookies, which are described separately.

6. Data Retention

• Account data: Retained while your account is active and for a reasonable period after deletion
• ESIGN acceptance records: Retained indefinitely for legal compliance
• Payment records: Retained as required by tax and financial regulations
• Other data: Deleted upon request, unless retention is legally required

7. Data Security

We protect your information using TLS encryption in transit, secure cloud infrastructure, and access controls. While no system is 100% secure, we use commercially reasonable measures to safeguard your data against unauthorized access, loss, or misuse.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for analytics cookies at any time

California residents: Under the CCPA/CPRA, you have additional rights including the right to know what personal information we collect and share, the right to delete, and the right to opt out of “sharing” for cross-context behavioral advertising. We do not sell personal information for money. We do use the Meta Pixel for retargeting on our marketing site, which may constitute “sharing” under California law — you can opt out at any time using the “Your Privacy Choices” link in our footer or by turning off the “Marketing & retargeting” category in Cookie Preferences. To exercise any other rights, contact us at matt.staab@curbbid.com.

9. Children’s Privacy

CurbBid is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact

Questions about this policy? Email us at matt.staab@curbbid.com.