Website operations supplement · 16 September 2026
The original notice below remains applicable. This supplement describes the account, request and measurement features added to the website.
Signal Preview requests: the details you submit are stored in BidMuni’s hosted database for Nathaniel’s review and response. A saved request is not a purchase or consent to an automated marketing sequence. The confirmation shows a request reference; it does not imply that an email has been delivered.
Private workspaces and email verification: customers sign in with an email address and a one-time code. BidMuni stores a verified email address and an internal account identifier to restrict profiles, saved opportunity decisions, bid amounts and private notes to the correct account. Resend processes the recipient address and verification message to deliver the code. BidMuni stores a keyed code verifier, not the readable code, and uses necessary secure authentication cookies. Codes expire after ten minutes; sessions expire after seven days without refresh and require sign-in again after thirty days. Owner operations retain a separate protected owner sign-in. Customers do not need a ChatGPT account.
Limited measurement: we count daily website actions by event type and page category, such as opening an opportunity or starting a preview request. Our analytics records do not contain your name, email, private notes, bid amounts or a persistent visitor identifier. Counts describe events, not unique visitors or customer results. We do not send these events to an advertising network. Browser Do Not Track and Global Privacy Control signals suppress optional event measurement.
Abuse prevention: requests use a short-lived, salted hash derived from the connecting IP address for rate limiting; the application does not store the raw IP address in these counters. Hosts may maintain their own security logs under their policies. Request-retry references prevent duplicate submissions. These operational records are separate from advertising tracking.
Authentication security records: the application records code-request, verification and sign-out events without readable codes or session tokens. Authentication event records are kept for up to thirty days; expired challenge records and rate-limit counters are cleaned during authentication activity. The email provider and host may retain their own delivery/security records under their policies. Contact us for account access or deletion requests.
Records are retained and handled under sections 8 and 9 below. To request access, correction, deletion, or a measurement preference, contact privacy@bidmuni.com. The linked original PDF predates this supplement; this page contains the current website-operating disclosures.
1. Scope
This notice explains how Nathaniel Sarrasin, a Massachusetts sole proprietor doing business as BidMuni (“BidMuni,” “we,” “us,” or “our”), handles information when a person visits the website, asks about a service, purchases a service, communicates with us, or receives a BidMuni deliverable.
2. Information we collect
We may collect business contact details; customer profile information such as trades, service territory, target agencies, and opportunity preferences; Order and engagement information; solicitation links or files; correspondence, feedback, deliveries, correction requests, and acknowledgments; payment status, amount, date, and a processor transaction reference; limited website, device, referral, and security-log information; and marketing preferences.
Please do not send Social Security numbers, complete payment-card numbers, passwords, authentication codes, complete tax returns, home-access information, or other sensitive information that BidMuni has not specifically requested.
3. How we use information
We use information to respond to inquiries, evaluate fit, prepare and administer Orders, process and reconcile payments, perform purchased monitoring or Bid Breakdowns, deliver services, support customers, review corrections, maintain source and quality records, secure and improve operations, keep required records, prevent misuse, and send service or permitted marketing messages.
4. How we disclose information
We may disclose information as reasonably necessary to payment processors; website hosting, email, cloud-storage, security, accounting, and workflow providers; professional advisers; government authorities when legally required; or a business successor subject to appropriate safeguards.
BidMuni does not sell personal information, knowingly share it for cross-context behavioral advertising, or rent customer lists.
Payment processing
Payments may be processed by Stripe or another disclosed provider under that provider's own privacy terms. BidMuni generally receives payment status, transaction references, customer contact information, and limited billing information rather than complete card credentials.
5. AI-assisted work
BidMuni may use limited AI-assisted tools for research, classification, drafting, or quality review. We will not knowingly submit customer confidential materials to an AI provider unless the customer authorizes that use or the provider's terms, security controls, and use have otherwise been approved for the engagement. AI-assisted output does not replace customer review of official documents.
6. Public records and customer materials
BidMuni may use public records to perform its services. A customer is responsible for having the right to provide nonpublic material. Official solicitation documents and addenda always control; BidMuni is not the official source.
7. Cookies and similar technologies
The initial BidMuni website does not intentionally use advertising cookies or cross-site tracking tools. Hosting and security providers may use necessary technologies or logs to deliver pages, prevent abuse, and maintain security. The website operations supplement above describes the limited first-party event measurement now used. If advertising or other nonessential tracking is added, this notice and any required choices will be updated first.
8. Retention and security
We retain information as reasonably necessary for service delivery, verification, corrections, support, accounting, tax, legal compliance, disputes, fraud prevention, and security. We use reasonable safeguards appropriate to the information handled, but no system or transmission method is completely secure.
9. Your choices
You may ask to access, correct, or delete information you provided, subject to applicable law and legitimate recordkeeping needs. You may opt out of marketing email using the message's unsubscribe method or by emailing privacy@bidmuni.com. Necessary service, transaction, security, and legal messages may still be sent. We may verify a request before acting on it.
10. Children, third-party sites, and changes
BidMuni is a business-to-business service not directed to children under 13. Links to agency portals, payment services, and other third parties are governed by their own practices. We may update this notice as services, providers, or obligations change and will identify the new effective date.
11. Contact
Nathaniel Sarrasin d/b/a BidMuni
Attention: Privacy
9 Pondview Drive
Ludlow, MA 01056
privacy@bidmuni.com
For service support: support@bidmuni.com.