1. What we collect
When you create an account and use Landbid, we collect three categories of data.
Account data
Your email address and a bcrypt hash of your password. We never store passwords in plain text. We also generate an API key per account so you can use the JSON API and Chrome extension — you can rotate it any time from your profile page.
Profile content
What you tell Landbid about yourself: your name, title, hourly rate, skills, writing samples, portfolio items, and any custom AI instructions. This data shapes how Landbid writes for you.
Bid content
Job titles, descriptions, client questions, budgets, the cover letters Landbid generates, refinements you make through chat, and any status updates (draft, submitted, won, lost). We also keep templates you save and the chat history for each bid.
Usage data
Standard server logs — IP address, user-agent, request paths, timestamps. Used to diagnose errors and rate-limit abusive traffic. No third-party analytics, no advertising trackers, no behavioral profiling.
2. How we use it
In one line: to provide the product. Concretely:
- ●Authenticate you and keep you signed in
- ●Generate and refine cover letters using your profile and a selected LLM provider
- ●Track your bid history, win rate, pricing trends, and template effectiveness
- ●Enforce monthly bid quotas tied to your subscription
- ●Respond to your support requests
- ●Detect and prevent abuse (rate limiting, anomaly detection)
We do not use your data to train machine learning models. We do not sell or rent it to third parties.
4. Data retention & deletion
Your account data stays for as long as your account is active. You control deletion at two levels:
- ●Per bid. Delete any bid and its full chat history from the bid detail page — immediately and permanently.
- ●Whole account. Delete your account from your profile page. All profile data, bids, chat history, templates, and analytics are wiped within 24 hours.
Backups are retained for up to 30 days for disaster recovery. Deleted data is purged from those backups on the next rotation. Anonymous server logs are retained for 90 days for security and debugging.
5. Security
No system is perfect, but we take a few specific measures:
- ●HTTPS in transit, encryption at rest in our Postgres database
- ●Passwords hashed with bcrypt; we never see your plaintext password
- ●Sessions stored in HTTP-only cookies, never readable by JavaScript
- ●API keys scoped per account and individually revocable
- ●Rate limiting on authentication and bid generation to prevent abuse
- ●Least-privilege access for the small team that operates the service
If you discover a security issue, please email security@landbid.app. We'll acknowledge within two business days.
6. Your rights
Regardless of where you live, you have the right to:
- ●Access the data we hold about you
- ●Export your bids, profile, and templates in JSON
- ●Correct anything inaccurate from your profile page
- ●Delete your data, in part or in full
- ●Object to any processing you think is inappropriate
Most of these are self-serve from your account. For anything that isn't, email privacy@landbid.app and we'll handle it within 30 days.
8. Children
Landbid is intended for professional freelancers and is not directed at children under 16. We don't knowingly collect data from anyone under 16. If you believe a child has provided data, email us and we'll delete it.
9. International transfers
Landbid operates globally. When you generate a bid, your data may be sent to LLM provider data centers in regions different from your own. We rely on standard contractual clauses and our provider's data-processing agreements where applicable.
10. Changes to this policy
If we change this policy, the "last updated" date at the top of the page changes. Material changes will be announced by email to active users at least 14 days before they take effect, with a chance to delete your account first.
11. Contact
Privacy questions: privacy@landbid.app
Security disclosures: security@landbid.app
Everything else: hello@landbid.app