TidySub is a bid management platform for construction contractors, built and operated by Obsidian Build & Sound LLC, doing business as Automated Construction ("we," "us," or "our"). This Privacy Policy explains what information TidySub collects, how we use it, who we share it with, and the choices you have. By using TidySub you agree to the practices described here.
1. Scope
This policy covers the TidySub application, including every customer-specific instance we host (for example, an address of the form yourcompany.automatedconstruction.io), the AI features inside it, and the email reports it sends. It does not cover the automatedconstruction.io marketing website, which has its own Privacy Policy. Each customer company (the "Customer") controls the data in its instance. We process that data on the Customer's behalf under our agreement with them.
2. Information We Collect
Account information. Your name, work email address, role, and, if you sign in with Google, your Google profile picture. Administrators create accounts, so some of this comes from your employer.
Customer content. What your team enters or uploads: bid invitations, project names and due dates, plans, specifications, estimates and takeoffs, proposals, vendor and client contacts, notes, tasks, and the files attached to any of them.
Email content. When a Customer connects a mailbox, TidySub imports bid invitations and replies related to those bids, including sender, recipients, subject, body, and attachments. It also records the messages your team sends from TidySub. See Section 5 for how Google data is handled.
Activity and usage. A history of changes to bids (who assigned, accepted, declined, or updated what and when), messages exchanged with the AI assistant, a record of which AI features were used and the time they saved, and feedback you give on AI answers.
Bug reports and support. Anything you send through the in-app bug report form or by email, together with your name, email, role, and the page you were on.
Technical data. Browser type, device type, IP address, sign-in timestamps, and error logs that help us keep the service running and secure. TidySub does not use advertising trackers.
3. How We Use Information
- To provide the service: show your team its bids, files, contacts, and reports, and keep them in sync
- To run AI features you or your team ask for, such as extracting bid details, drafting messages, answering questions about documents, and measuring plans
- To send emails your team approves, and the scheduled team reports your administrator turns on
- To notify you when a bid is assigned to you
- To respond to support requests and bug reports
- To secure the service, prevent abuse, and meet legal obligations
- To understand how the product is used so we can improve it, using aggregated information wherever possible
We do not sell personal information, and we do not use Customer content for advertising.
4. AI Processing
When you use an AI feature, the content needed for that request (for example, a bid email, the pages of a plan, or a question you typed) is sent to a large language model provider through OpenRouter to produce the answer. Providers are chosen under terms that do not permit them to train their models on your data. We do not use Customer content to train models of our own.
AI drafts and proposed changes are shown to your team for approval before anything is sent or saved. The assistant keeps notes for a project only when you ask it to remember something, and you can see and delete those notes inside the app.
For diagnostics, we may record AI requests and responses in a tracing tool (LangSmith). This is used to fix problems and improve answer quality, is limited to our team, and is deleted on a rolling schedule.
5. Google User Data
TidySub can connect to Google services on behalf of a Customer. When it does, it uses the access you grant only for the purposes below:
- Sign in with Google: to identify you and load your name, email, and profile picture
- Gmail: to read incoming bid invitations and replies so they can be imported into your bid inbox, to send the messages and follow-ups your team explicitly approves, to label messages TidySub has processed, and to mark imported messages as read. TidySub does not archive or delete your email.
- Google Sheets: to export a table you ask to open in Sheets, and to import an estimating task list your administrator points it at
TidySub's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the features described above. It is not used for advertising, is not sold, and is not transferred to third parties except as needed to provide those features, for security, or to comply with the law. Humans do not read your Google data unless you ask us for support, it is needed for security, or the law requires it. A Customer can remove TidySub's access at any time from the connected Google account's security settings.
6. Who We Share Information With
We share information only with the service providers that help us run TidySub, each bound by contract to protect it:
| Provider | What it does |
|---|---|
| Supabase | Database, file storage, and sign-in |
| Sign-in, Gmail, and Sheets when connected | |
| OpenRouter and its model providers | Large language models for AI features |
| n8n | Automation workflows for email import, drafting, and reports |
| LangSmith | Optional AI diagnostics and tracing |
| Hosting providers (Hostinger, Vercel) | Servers that run the application |
We may also share information when the law requires it, to protect the rights and safety of our customers or the public, or as part of a merger or sale of our business, in which case this policy will continue to apply.
7. Data Retention
We keep Customer content for as long as the Customer's agreement with us is active. Administrators can set retention windows for some records inside the app, and past-due, undecided bids are archived automatically. When an agreement ends we make the data available for export for a reasonable period, then delete it from live systems, with backups expiring on their normal schedule. Account records and activity history for a deleted user are kept with the user's name removed so the Customer's bid history stays complete.
8. Security
Each Customer's data is isolated from every other Customer's with database-level access rules, so one company can never read another's records. Data is encrypted in transit. Access to production systems is limited to the people who need it, and automated services run with the least access they need. No system is perfectly secure, so if we learn of a breach that affects your data we will notify the Customer's administrator without undue delay.
9. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete personal information about you, or to object to how it is used. Because the Customer controls its instance, requests are usually handled by your administrator, who can update or delete your account from inside the app. You can also contact us directly and we will respond within a reasonable time. Where we act for a Customer, we may refer your request to them.
10. Children
TidySub is a business tool. It is not directed at anyone under 18, and we do not knowingly collect information from children.
11. Changes to This Policy
We may update this policy from time to time. We will post the new version here and update the "Last updated" date. For material changes we will also notify the Customer's administrator.
12. Contact Us
Questions or requests about your data? Contact:
Obsidian Build & Sound LLC (dba Automated Construction)
odalo@automatedconstruction.io
See also the TidySub Terms of Service and the TidySub Usage Policy. For the automatedconstruction.io website, see our website Privacy Policy and website Terms.