Privacy policy

What runs where

• Lowkey (the default) runs the model inside your browser. Bidvork reads the Upwork job page you have open, on your device, to score it. The job post isn't sent to our servers to do that.
• Rizz (beta) drafts on our servers. Only once you turn it on, the job post and your Bidvork profile are sent to our servers, which pass them to our GPU server to write the draft. They're used for that draft only: we don't store them or reuse them. We ask before the first time, and you can turn it off any time on your Rizz page.
• Your Plug (coming soon) uses your own API key or your own model server. The key stays in the browser you entered it in; requests go straight from your browser to the provider you chose, never through our servers, and that provider's privacy policy applies to them. A local Ollama server on your own computer works the same way.

What we keep in your account

• Your email address and a hashed password (we never see the password itself).
• The profile you write: skills, experience, rate, bio, tone, deal-breakers, portfolio items and targeting preferences. Bidvork writes drafts from this and nothing else.
• Job history, synced by the extension so you can see it on your dashboard: each scored job's title and link, its score and the one-line reason, and the text of any draft you generate. Not the full job post.
• Whether and when your email was verified.
• If you join the Rizz waitlist: your email and when you joined, and when you were let in.
• If you use Rizz: when you turned it on, and a record of each Rizz request (when, whether it was a score or a draft, whether it succeeded and used a credit) and your credit balance. Not the job post, your profile or the reply.

The extension also keeps a few things in your browser: your sign-in token, a copy of your profile for offline use, recent scores, your AI mode setting, and the downloaded model file. Removing the extension removes them.

What we don't do

• We don't ask for, see or store your Upwork password, and we don't access your Upwork account.
• The extension reads only the Upwork page you have open, and makes no requests to Upwork itself.
• We don't sell your data or use it for advertising.
• We don't train models on your profile, jobs or drafts.

Analytics and cookies

The website uses a sign-in cookie so you stay logged in. On our marketing pages (the home page and these policy pages) we use Google Analytics to see how many people visit and where they come from, only if you choose "Accept" on the cookie banner. If you choose "Reject", Google Analytics never loads. You can change your choice any time from "Cookie settings" in the footer. Your dashboard, profile and account pages, and the extension, have no analytics.

Who helps us run Bidvork

These companies process data for us, only to provide the service:

• Vercel, which hosts the website.
• Neon, which hosts our database.
• Resend, which sends our emails (verification, waitlist, receipts).
• Google, for analytics on marketing pages if you accept it.
• Hugging Face, from which your browser downloads the Lowkey model file.
• Cloudflare, whose private tunnel carries Rizz requests between our website and our own GPU server (we run that server ourselves).
• Razorpay, which will process payments once paid credits are on sale.

How long we keep it, and deleting it

We keep your account data while your account is open. To delete your account and everything in it, email [email protected] from the address on the account; we'll delete it within 30 days and confirm. Records we must keep by law, such as payment records, are kept only as long as the law requires. A delete button in your dashboard is coming.

Depending on where you live, you may also have the right to see, correct or export your data, or to object to how we use it. Email us and we'll help.

Security

Passwords are stored only as salted hashes, the website is served over HTTPS, and the extension talks only to our website, the model download, and any model server you choose.

Age

Bidvork is for people aged 18 and over.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect. See also our terms and refund policy.

Contact

Questions about this page? Email [email protected]. A person reads every message.