Plain-language summary: Call Bids is a pay-per-call marketplace for service professionals. We collect information you give us when registering, information about calls routed through our platform, and payment details processed securely by Stripe. We never sell your personal data to third parties.
🏢 Who We Are
Call Bids ("we," "our," or "us") operates the pay-per-call lead generation marketplace at call-bids.com. Our platform connects service professionals with inbound phone leads from customers searching for services in their area.
This Privacy Policy explains how we collect, use, disclose, and protect information about you when you register as a professional on our platform, create a campaign, receive calls, or otherwise interact with our services.
By registering and using Call Bids, you agree to the collection and use of information as described in this policy.
📥 Information We Collect
Information you provide directly:
| Category | Examples | Required? |
|---|---|---|
| Account details | First name, last name, email address, password | Yes |
| Business profile | Business name, website, years in business | Yes |
| Phone number | Mobile number to receive routed calls (E.164 format) | Yes |
| Service area | State, ZIP codes, service radius | Yes |
| Profession & category | Selected trade (e.g. Plumber, Electrician) | Yes |
| Bid information | Price per call, monthly budget cap, operating hours | Yes |
| Call feedback | Star ratings and quality tags on received calls | Optional |
Information collected automatically:
- Login activity — date, time, and IP address of each sign-in
- Session tokens — JWT tokens stored in your browser to keep you signed in
- Usage data — which screens you visit, buttons you click, and how long you stay
- Device information — browser type, operating system, screen resolution
Information from third parties:
- Google OAuth — if you sign in with Google, we receive your name and email address from Google
- Facebook OAuth — if you sign in with Facebook, we receive your name and email address from Facebook
- Twilio — when calls are routed through our system, Twilio provides the call duration, status, and a masked version of the caller's number
- Stripe — payment confirmation and the last 4 digits of your card (we never receive full card numbers)
⚙️ How We Use Your Information
- To operate the platform — routing inbound calls to you based on your profession, location, and bid
- To manage your account — authentication, profile management, campaign settings
- To process billing — charging your payment method for billable calls, generating monthly invoices
- To send notifications — call alerts via SMS before each incoming call, invoice emails, budget alerts
- To verify your identity — phone number verification via 6-digit SMS code
- To improve the platform — analyzing usage patterns to fix bugs and improve features
- To comply with legal obligations — responding to lawful requests from authorities
- To detect and prevent fraud — identifying suspicious call patterns or payment anomalies
We do not use your information for behavioral advertising. We do not sell, rent, or trade your personal data to any advertising networks or data brokers.
🤝 Sharing Your Information
We share your information only in these limited circumstances:
- Twilio Inc. — to route inbound calls to your registered phone number. Twilio processes call metadata on our behalf.
- Stripe Inc. — to process payments. Stripe handles all card data under PCI DSS compliance.
- Resend / Email providers — to send transactional emails (verification, invoices, alerts).
- Google LLC / Meta Platforms Inc. — only if you choose to sign in via Google or Facebook OAuth.
- Legal requirements — if required by law, court order, or to protect the rights and safety of our users or the public.
- Business transfer — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before this occurs.
We do not share your personal data with any other third parties. We never sell your data.
📞 Call Recording & Telephony
Important notice regarding call recording: Calls routed through Call Bids may be recorded for quality assurance and dispute resolution purposes. In US states with two-party consent laws (including California, Florida, and others), all parties must be informed before recording begins. Where legally required, a disclosure message is played before the call connects.
- Call recordings are stored securely and retained for 90 days
- You may request deletion of specific call recordings by contacting us
- Caller phone numbers are masked — we store only the last 4 digits for fraud prevention
- Call duration, outcome (answered/missed/busy), and whether the call was billable are stored in your account
- Call recordings are accessible only to the receiving professional and Call Bids staff
💳 Payments & Billing
All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. Call Bids never stores raw card numbers, CVV codes, or full bank account details.
- We store: your Stripe Customer ID, payment method type (card/Apple Pay/Google Pay), card brand, and last 4 digits
- You are charged only for calls that connect and last 60 seconds or more
- Monthly invoices are generated on the 1st of each month and emailed to your registered address
- Failed payments are retried automatically up to 3 times over 7 days
- If all retries fail, your campaigns are paused and you are notified by email
🍪 Cookies & Tracking
Call Bids uses minimal browser storage to operate the platform:
| Storage Item | Purpose | Duration |
|---|---|---|
| cb_token | JWT access token — keeps you logged in | 15 minutes |
| cb_refresh | JWT refresh token — renews your session | 30 days |
| cb_oauth_profile | Cached Google/Facebook profile for session | Session |
| cb_pending_email | Remembers email during verification flow | Session |
We do not use third-party advertising cookies, cross-site tracking pixels, or analytics services that track you outside of call-bids.com. We do not use Google Analytics, Facebook Pixel, or similar tracking tools.
🗓️ Data Retention
- Account data — retained while your account is active. Deleted within 30 days of account deletion request.
- Call records — retained for 24 months for billing and dispute purposes, then permanently deleted.
- Call recordings — retained for 90 days, then automatically purged.
- Payment records — retained for 7 years as required by financial regulations.
- Login activity logs — retained for 12 months for security purposes.
When you delete your account, we immediately disable access and queue your personal data for deletion within 30 days. Payment records required for tax and legal compliance are retained for the legally required period.
⚖️ Your Rights
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing certain requests.
🔐 Security
We implement industry-standard security measures to protect your data:
- Passwords — hashed using bcrypt with a minimum cost factor of 12. We never store plain-text passwords.
- Tokens — JWT access tokens expire in 15 minutes. Refresh tokens expire in 30 days and are rotated on every use.
- Communications — all data transmitted between your browser and our servers is encrypted using TLS 1.2+.
- Payments — card data is handled exclusively by Stripe and never passes through our servers.
- API security — all endpoints are rate-limited, and sensitive operations require authentication.
- Webhooks — all Stripe and Twilio webhooks are validated using cryptographic signatures.
No system is 100% secure. If you suspect unauthorized access to your account, contact us immediately at [email protected] and change your password.
👶 Children's Privacy
Call Bids is a professional platform intended for business use only. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a minor has registered, we will promptly delete their account and associated data.
If you believe a minor has created an account on our platform, please contact us at [email protected].
🔄 Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Update the "Last updated" date at the top of this page
- Send an email notification to all registered users at least 14 days before the changes take effect
- Display a notice on the Call Bids dashboard on your next login
Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account at any time.
✉️ Contact Us
For any privacy-related questions, data requests, or concerns, please contact us: