Privacy Policy

Effective March 28, 2026

1. Introduction

CurbBid Inc. ("CurbBid," "we," "us," or "our") is a Delaware C-corporation based in Texas that operates the CurbBid platform at curbbid.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and platform.

CurbBid serves two types of users: contractors who create authenticated accounts to manage their business, and customers who access estimates, invoices, and payment pages via public token URLs without creating an account.

2. Information We Collect

Information You Provide

  • Contractor accounts: Name, email address, password, or Google OAuth credentials (name, email, profile image)
  • Business profiles: Business name, address, phone number, email, and logo
  • Customer records: Name, address, phone number, and email as entered by contractors
  • Estimate acceptance: Typed name, consent text, and related signature data under the ESIGN Act
  • Waitlist and demo signups: Name, business name, email, and phone number
  • Referral program: Referral codes and associated contact information

Information Collected Automatically

  • IP address, browser type, operating system, and user agent
  • Session data and authentication tokens
  • Estimate and invoice view timestamps and activity logs
  • Error and performance data via Sentry (including sampled session replays)
  • Product analytics via PostHog (only with your consent)

Information from Third Parties

  • Google OAuth: Name, email address, and profile image when you sign in with Google
  • Stripe: Payment status and transaction identifiers. We never receive or store your full credit card numbers.

3. How We Use Your Information

  • Operating and improving the CurbBid platform
  • Processing payments through Stripe Connect, including the applicable platform fee
  • Sending transactional SMS messages via Twilio and emails via Resend on behalf of contractors
  • Authenticating users and managing sessions
  • Maintaining ESIGN Act compliance records (signer identity, IP address, user agent, timestamp, document hash, consent text, and line item snapshots)
  • Monitoring errors and platform reliability via Sentry
  • Analyzing product usage via PostHog (consent-gated)
  • Preventing fraud and abuse
  • Communicating product updates, launch information, and support

4. How We Share Your Information

We do not sell, rent, or share your personal data — including your phone number — with third parties for their marketing purposes. We may share information with the following parties solely to operate the Service:

  • Service providers: Stripe (payments), Twilio (SMS), Resend (email), Convex (database and backend), Turso (authentication database), Google (OAuth), Sentry (error monitoring), and PostHog (analytics)
  • Contractor–customer sharing: Contractors can view customer information they have entered. Customers can view contractor business information on estimates and invoices shared with them.
  • Legal requirements: When required by law, regulation, legal process, or government request
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

5. Cookies and Tracking

We use essential cookies for authentication and site functionality, which are always active. Analytics cookies from PostHog are only enabled after you provide consent. For full details, see our Cookie Policy.

6. Data Retention

  • Account data: Retained while your account is active and for a reasonable period after deletion
  • ESIGN acceptance records: Retained indefinitely for legal compliance
  • Payment records: Retained as required by tax and financial regulations
  • Other data: Deleted upon request, unless retention is legally required

7. Data Security

We protect your information using TLS encryption in transit, secure cloud infrastructure, and access controls. While no system is 100% secure, we use commercially reasonable measures to safeguard your data against unauthorized access, loss, or misuse.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Withdraw consent for analytics cookies at any time

California residents: Under the CCPA, you have additional rights including the right to know what personal information we collect and share, the right to delete, and the right to opt out of the sale of personal information (which we do not do). To exercise any of these rights, contact us at matt.staab@curbbid.com.

9. Children's Privacy

CurbBid is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact

Questions about this policy? Email us at matt.staab@curbbid.com.