Data Processing Addendum

This Data Processing Addendum (“DPA”) supplements the Terms of Service and governs the processing by BlueTeem LLC (operating JobsiteBids) of personal data on behalf of customers who are subject to applicable U.S. data-protection laws. Data is processed and stored in the United States.

Scope

Where we process personal data that you provide as part of using the Service, we act as a service provider/processor and you act as the business/controller. We process that data only on your documented instructions and as needed to provide the Service, and we will not “sell” or “share” it or retain, use, or disclose it for any purpose other than providing the Service.

Subprocessors

We engage a limited set of vetted subprocessors to provide the Service. Each is bound by data-protection obligations no less protective than those in this DPA. We disclose subprocessors by category; the current list of named subprocessors is available on request. As of the date above, the categories are:

• Cloud hosting & databaseApplication hosting, database, authentication, and storage
• Email deliveryTransactional and digest email delivery
• AI document processingParsing of RFP attachments you choose to process
• Payment processingSubscription billing and payment processing
• Product analyticsAggregate usage analytics for the website and app
• Error monitoringApplication error tracking and diagnostics

We will give notice of any new subprocessor before it begins processing your personal data, so you have the opportunity to object. To request the current named subprocessor list or to receive subprocessor-change notifications, email legal@jobsitebids.com.

Security and breach notification

We maintain appropriate technical and organizational measures to protect personal data and will notify you without undue delay after becoming aware of a personal-data breach affecting your data. We will reasonably assist you with your obligations to respond to data-subject requests and to demonstrate compliance.

Deletion on termination

When you delete your account, or when you request deletion after your use of the Service ends, we will delete the personal data we process on your behalf within a reasonable period, except where retention is required or permitted by law (for example, billing and audit records), in which case we continue to protect the data under this DPA and delete it when the retention purpose ends. If your subscription lapses but your account remains open, we retain your data so you can return, as described in our Privacy Policy.

Requesting a signed DPA

To request a countersigned copy of the DPA for your records, email legal@jobsitebids.com.