Privacy

Last updated: 24 October 2026.

Who we are

The Bid Window sells commercial roofing leads to roofing contractors: a one-time Roof Age Report and Daily Signals, a daily email and signed-in page listing commercial buildings whose roofs are reaching replacement age. Questions about this page: hello@thebidwindow.com.

Information about you, if you are a customer or ask for a sample

• Sample request. Your name, company, work email and county, so we can send the sample and follow up about it. With the request we also record your IP address, browser details and the page you came from, to stop abuse of the form.
• Your account. Your company name, the email addresses you ask us to send Daily Signals to, and the area you cover. Signing in uses only your email address: we email you a one-time sign-in link that expires after 15 minutes. There is no password.
• Use of the service. Sign-ins, sign-outs and exports are recorded with the time and IP address, for security. If you click "relevant", "not relevant" or "already knew" on a building in an email, we record which building and which answer, to improve what we send.
• Billing. Payment is taken through a payment link from our payment provider. We do not see or store your card details.

Information in our products

The leads are built from public records: building permits published by the City of Austin and other permit data licensed from PermitStack, and parcel records published by the county appraisal district. These records can name a property's owner of record, which is usually a company. Daily Signals does not show owner names. The Roof Age Report includes the owner of record as the appraisal district publishes it. If you are named in a record and want us to stop showing your name in the Report, email us and we will remove it from future Reports.

What we do with it, and who else sees it

• We use your information to provide the service, to sign you in, to send the emails you asked for, to keep the service secure, and to improve the leads.
• We do not sell your information and we do not share it for advertising.
• We use a small number of service providers who process data for us:
  • DigitalOcean hosts the service and stores its encrypted backups.
  • Resend delivers our email.
  • Our payment provider takes payments.
  • Sentry, once switched on, receives error reports when the service fails; it is configured not to send personal data by default.
  • The public pages load their fonts from Google Fonts, so your browser's IP address reaches Google when you open them.
• We would disclose information if the law required it.

Cookies

When you sign in we set one cookie that keeps you signed in for up to seven days. We use no analytics, advertising or tracking cookies.

Email

Every Daily Signals email has an unsubscribe link that works with one click and carries our postal address. You can also reply or write to hello@thebidwindow.com.

How long we keep it

• Sign-in links expire after 15 minutes; a signed-in session lasts at most seven days.
• Account information: for as long as you are a customer, and then 24 months, unless you ask us to delete it sooner.
• Sample requests that never became customers: 12 months.
• Security records (sign-ins, exports): 12 months.
• Backups: the database is copied every night, encrypted, to DigitalOcean storage, and each nightly copy is deleted automatically after 30 days. Something we delete therefore leaves the nightly backups within 30 days. Before maintenance on the server we sometimes also take a one-off snapshot of it; a snapshot holds a copy until we delete it.

Your choices

You can ask to see, correct or delete the information we hold about you by emailing hello@thebidwindow.com. We will answer within 30 days. If we keep something because the law requires it, we will tell you what and why.

Changes

If we change this page in a way that matters, we will update the date above and tell customers by email.