Privacy Policy

Last updated: April 17, 2026 · Effective: April 17, 2026

SYSMIAMI LLC ("BIDROI," "we," "us") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account Information

Email address — required to create an account and receive communications
Full name — provided during registration or imported from Google
Password — stored as a bcrypt hash; we never store your plain-text password
Language preference — English or Spanish, stored per account

Google OAuth (if used)

If you sign in with Google, we receive from Google: your email address, display name, and profile picture. We do not receive your Google password or access to other Google services. Google's use of your data is governed by Google's Privacy Policy.

Payment Information

Payments are processed by Stripe, Inc. BIDROI never receives or stores your full credit card number. Stripe provides us only with a payment token, last 4 digits, and card type. Stripe's data practices are governed by Stripe's Privacy Policy.

Usage Data

IP address and approximate location (country/city level)
Browser type and device information
Pages visited and features used within the platform
Investment decisions and notes you record in the platform
Filters, favorites, and saved preferences

2. How We Use Your Information

Purpose	Legal Basis
Provide and operate the Service (show auctions, scores, decisions)	Contract performance
Process payments and manage subscriptions	Contract performance
Send daily email digests and transactional emails	Contract performance / Consent
Improve scoring algorithms and data quality	Legitimate interest
Respond to support requests	Legitimate interest
Comply with legal obligations	Legal obligation
Detect fraud and abuse	Legitimate interest

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Third-Party Service Providers

We share data only with vendors necessary to operate the Service:

Stripe, Inc. — payment processing (USA). Stripe is PCI-DSS Level 1 compliant.
Google LLC — OAuth authentication (if you use "Sign in with Google").
Email provider — transactional emails and daily digests (e.g., Gmail SMTP or similar).

We do not share your data with any real estate, financial, or marketing third parties.

4. Data Retention

Active accounts: retained for the duration of your subscription
Cancelled subscriptions: account data retained for 90 days, then deleted upon request or automatically
Trial accounts (not converted): deleted after 30 days of expiration
Payment records: retained as required by law (typically 7 years for financial records)
Decision logs and notes: deleted with your account upon request

5. Data Security

We implement industry-standard security measures including:

HTTPS encryption for all data in transit (TLS 1.2+)
Passwords stored as bcrypt hashes (never plain text)
Session tokens stored in HTTP-only cookies
Stripe handles all payment data — BIDROI never touches raw card numbers

No system is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

6. Your Rights

For all users

Access: request a copy of the personal data we hold about you
Correction: request correction of inaccurate data
Deletion: request deletion of your account and associated data
Portability: receive your decision history in CSV format (use the Export CSV feature)
Opt-out: unsubscribe from marketing emails at any time via the unsubscribe link

California Residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect, request deletion of your information, and opt-out of any sale of your information. BIDROI does not sell personal information. To exercise your rights, contact us at [email protected].

7. Cookies

BIDROI uses the following cookies:

session — HTTP-only authentication cookie (JWT). Required for login. Expires in 30 days.
localStorage — font size preference and theme setting. Stored in your browser only, not transmitted to our servers.

We do not use advertising cookies, tracking pixels, or third-party analytics scripts.

8. Children's Privacy

BIDROI is not directed to children under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you by email or by posting a notice in the platform for material changes. Continued use after the effective date constitutes acceptance of the updated policy.

10. Contact

For privacy requests, data deletion, or questions about this policy:

Email: [email protected]
Company: SYSMIAMI LLC
Location: Miami, Florida, United States