Privacy policy

01Who we are

The controller responsible for your personal data is Bid Optimized Ltd. (БИД ОПТИМАЙЗД ЕООД), a company registered in Bulgaria under UIC 207242022, with its registered address at 7 Sheynovo Str., Fl. 7, Oborishte District, 1000 Sofia, Bulgaria. We’re part of the Commercix group. In this policy, “BidOptimized”, “we” and “us” mean Bid Optimized Ltd.

For anything about privacy, email hello@bidoptimized.com or write to us at the address above.

02What this policy covers

This policy applies to:

• this website, bidoptimized.com;
• emails and other messages you send us;
• our dealings with customers, partners, suppliers and investors, and the people who work for them;
• our products and services.

Each of our products also has its own privacy notice that explains in detail what it collects and why. For Margin AI, see the Margin AI privacy policy. Where a product notice is more specific, it applies alongside this policy. Websites and services we link to, including meatborsa.com, have their own privacy policies.

03What we collect and why

When you visit this website

Your browser automatically sends technical information: your IP address, browser and device type, the page you request, the page you came from, and the date and time. Our hosting provider, Cloudflare, uses it to deliver the site and protect it from attacks and abuse. The site’s fonts are loaded from Bunny Fonts (BunnyWay d.o.o., Slovenia), which receives your IP address in order to deliver the font files.

This website has no analytics, advertising or social media trackers, and it doesn’t set cookies of its own. Cloudflare may set a strictly necessary security cookie to tell people and bots apart; it isn’t used to track you. If you choose a theme (Auto, Day or Night), your browser remembers that choice on your device; it isn’t sent to us.

Legal basisOur legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

When you book a call

Our “Book a call” buttons open a booking window from Calendly (Calendly LLC, United States). Calendly’s files load only after you click. Calendly receives what you enter, such as your name, email address and any notes, plus technical data such as your IP address, and may set the cookies it needs to work. We receive your booking details so we can hold the call. See Calendly’s privacy notice.

Legal basisSteps you ask us to take before entering into a contract (Art. 6(1)(b)), and our legitimate interest in arranging calls (Art. 6(1)(f)).

When you contact us

If you email or message us, we receive your name, email address and anything you include, such as your company, your role and the content of your message. We use it to reply and to follow up.

Legal basisOur legitimate interest in answering messages (Art. 6(1)(f)), or steps you ask us to take before entering into a contract (Art. 6(1)(b)).

When you use our products

What we collect depends on the product. Typically it includes your account details (name, email address, phone number, company), the content you add (for example voice notes and their transcripts, notes, contacts, documents, offers and prices), the technical and usage information we need to run the service securely, and your conversations with our support team.

We use this to provide the service you or your company signed up for, to keep it secure, to help you when you need support, and to improve our products. Our products use AI, including Carcass, our own model, to transcribe, classify and match the information you give them. The AI doesn’t make decisions about you that have legal or similarly significant effects.

If you use one of our products to store information about other people, such as your business contacts, you decide what to store and you’re responsible for having a lawful basis to do so. We process that information on your behalf to provide the service.

Payments are handled by the payment provider you use, such as Apple’s App Store, under its own privacy policy. We don’t receive your full card details, only what we need to manage your subscription and invoices.

Legal basisPerforming our contract with you or your company (Art. 6(1)(b)); our legitimate interests in keeping our services secure and improving them (Art. 6(1)(f)); and your consent where a product asks for it (Art. 6(1)(a)), which you can withdraw at any time.

Customers, partners and suppliers

We keep the business contact details of the people we work with (names, job titles, email addresses and phone numbers), our correspondence, and contract and billing details. We use them to manage our relationship, contracts and invoices, and to keep you up to date about our products. You can opt out of product news at any time.

Legal basisPerforming a contract (Art. 6(1)(b)); our legitimate interest in running and growing our business (Art. 6(1)(f)); and legal obligations such as accounting and tax rules (Art. 6(1)(c)).

Legal obligations and claims

We keep some records because the law requires it, respond to lawful requests from authorities, and use data where needed to establish, exercise or defend legal claims.

Legal basisLegal obligations (Art. 6(1)(c)) and our legitimate interests (Art. 6(1)(f)).

Do you have to give us your data?

Not to browse this website. To use one of our products, we need some details, such as an email address to sign you in. Without them, we can’t provide the service.

04Who we share it with

We share personal data only when we need to, with:

• Service providers that process data for us under contract: website hosting and delivery (Cloudflare), web fonts (Bunny Fonts), booking calls (Calendly), cloud hosting and databases, email and office software, AI and speech recognition providers, and customer support tools. They may only use the data to provide their services to us.
• Other Commercix group companies, where needed to provide and support our services.
• App stores and payment providers, such as Apple, which act as independent controllers.
• Professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality.
• Authorities, courts and regulators, when the law requires it.
• A buyer or investor, if all or part of our business is sold or reorganized, under confidentiality obligations.

We don’t sell personal data, and we don’t share it for advertising.

05Transfers outside the EU

We keep product data in the European Union wherever we can; Margin AI’s data, for example, is hosted in Frankfurt, Germany. Some of our providers are based outside the European Economic Area, for example in the United States. When personal data is transferred there, we rely on an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework for certified companies, or on the Commission’s Standard Contractual Clauses, with extra safeguards where needed. You can ask us for a copy of the relevant safeguards.

06How long we keep it

• Website technical data: kept by our hosting providers for a short time, for security and operations.
• Messages: as long as we need them to handle your request and any follow-up, unless we have to keep them for a contract or for legal reasons.
• Product accounts: for as long as your account is active. When you close your account or ask us to delete it, we delete or anonymize your data, except what we must keep by law, such as invoices. Backups are overwritten on a rolling schedule.
• Business, accounting and tax records: for as long as the law requires, which in Bulgaria is up to 10 years.
• Legal claims: until the claim is settled or the limitation period ends.

07How we protect it

We encrypt data in transit, limit access to the people who need it, host product data in the EU where we can, and require our providers by contract to protect it. No system is completely secure. If a breach puts your data at risk, we’ll tell you and the supervisory authority as the law requires.

08Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use it;
• receive the data you gave us in a portable format, or have it sent to another company;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw your consent at any time, where we rely on it. This doesn’t affect processing that happened before you withdrew it.

To use any of these rights, email hello@bidoptimized.com. It’s free. We’ll reply within one month; if a request is complex, we may need up to two more months and will tell you why. We may ask you to confirm your identity first.

If you’re unhappy with how we handle your data, please tell us. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live or work.

09Children

Our website and products are made for businesses and aren’t directed at children under 16. We don’t knowingly collect their personal data. If you think we have, contact us and we’ll delete it.

10Changes to this policy

We’ll update this page when our practices change and update the date at the top. If a change is significant, we’ll also tell you in our products or by email.

11Contact us