- Local-First Workspace: Your Upwork session credentials never leave your local machine. We do not ask for or store your Upwork password.
- No AI Model Training: We never sell your proprietary proposal drafts or use your custom writing personas to train public AI models.
- Google API Limited Use: Google Docs API integration is used solely to export proposal documents to your personal Google Drive upon your direct command.
1. Overview & Scope
This Privacy Policy explains how TK Turners LLC("BidLoop", "we", "us", or "our") collects, uses, protects, and discloses information when you use the BidLoop desktop application, website (bidloop.tkturners.com), and related cloud sync services.
By accessing or using BidLoop, you agree to the collection and use of information in accordance with this policy. If you do not agree with any terms, please do not use our application.
2. Information We Process
We only process data necessary to provide reliable job discovery and proposal workflows:
A. Account & Authentication Information
When an account is provisioned for you by an administrator, we store your name, email address, password hash, and unique account identifier for secure authentication.
B. Workspace & Bidding Configuration
To enable custom alerts and personalized proposal drafts, BidLoop stores your search filter criteria, saved feeds, custom writing voice personas, skill tags, and rate floor preferences.
C. Telemetry & System Health
We collect anonymized operational logs (e.g. app version, operating system, crash logs, and API latency metrics) to ensure application stability and debug technical issues.
3. Google API Services Compliance
BidLoop offers an optional feature allowing you to export generated proposal drafts directly into a Google Doc in your Google Drive.
Scope Requested & Exact Usage
We request the https://www.googleapis.com/auth/documents scope solely to create a new Google Doc containing your proposal and return its URL.
- We do not read, modify, or delete other documents or files in your Google Drive.
- We do not access your Google emails, contacts, or calendar.
- We do not transfer or sell Google user data to third parties or advertising networks.
- We do not use information obtained from Google APIs to train generalized AI models.
BidLoop's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke BidLoop's Google access at any time from within the application Settings or directly on Google's Third-Party Permissions Page.
4. Upwork Session Security & Local Architecture
Live job alerts and discovery function completely independently without connecting an Upwork account.
If you choose to use autonomous proposal submission or profile-powered placeholders:
- You sign in to Upwork via your own local Google Chrome instance on your computer.
- Your session cookies and tokens remain stored securely on your local device.
- BidLoop servers never intercept, receive, or store your Upwork password.
5. Billing & Payment Data
All payments, subscriptions, and invoicing are handled securely through Stripe, Inc.
BidLoop never collects, transmits, or stores full credit card numbers or CVV codes on our servers. We only retain Stripe customer tokens, invoice identifiers, subscription tier status, and billing cycle dates.
6. AI Models & Data Usage
BidLoop allows you to generate proposal drafts using modern large language models (LLMs).
- Zero Training Retention: Enterprise API agreements with our LLM providers (including OpenAI, Anthropic, and Google Vertex) explicitly prohibit using API input/output data to train foundation models.
- Bring Your Own Key (BYOK): When using your own API credentials, your requests travel directly from your desktop app to the respective AI provider under your own commercial terms.
7. Data Retention & Deletion
We retain account and configuration data for as long as your account remains active.
If you request account deletion, all associated cloud records, writing personas, and saved preferences are permanently purged from our primary database within 30 business days.
8. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your location, you have statutory rights regarding your personal information, including:
- Right of Access: Request a copy of all personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and personal records.
- Right to Data Portability: Export your saved feeds and writing personas in a structured JSON format.
9. Contact & Inquiries
If you have any questions or concerns regarding this Privacy Policy or our data handling practices, please reach out to our team: