Data Processing Addendum
This page is a plain-language summary of the data processing terms that attach to every BidLine agreement. It is written so an estimator or an owner can read it, not just counsel. The signed addendum is the controlling document; request it at josh@bidline.ai and we return it with the pilot paperwork. CONFIRM: the signed DPA document itself does not exist yet; it needs to be drafted from this summary and reviewed by counsel before this page ships
The roles
You are the controller of your data: your price book, your plan sets, your estimates, your corrections. Solid Giant Ltd, operating BidLine, is the processor. We process that material to deliver the service described in your agreement, on your documented instructions, and for nothing else.
What we commit to
In the addendum we commit, in enforceable language, to the following:
- We process your data only to deliver BidLine to your account, never for cross-customer products, benchmarks, or model training shared across customers.
- Everyone with access to customer data is bound by confidentiality obligations.
- The infrastructure providers we rely on are listed publicly at bidline.ai/subprocessors, and we notify customers before adding one that touches customer data. CONFIRM: notice period: 30 days proposed, Josh to set
- If we become aware of a breach affecting your data, we notify you without undue delay with what we know and what we are doing. CONFIRM: whether to commit to a specific hour count belongs to Josh and counsel, not this draft
- We assist you with data subject requests that concern data we hold for you.
- At termination, your correction ledger and your data are returned to you in a portable form, and our copies are deleted on the timeline written in the addendum. CONFIRM: Craig must verify per-account deletion is actually executable end to end before this bullet ships
What we will not sign away
The addendum does not grant us any license to your price book, your margins, or your corrections beyond operating the service for you. It also does not quietly grant marketing rights: using your name as a reference requires your separate written permission, every time.
How to execute it
Ask for the addendum at josh@bidline.ai. It is signed alongside the pilot agreement, before your price book or any plan set is loaded, so the protections are in force for the first byte we process.