1. Controller and contact
Not configured (required before launch) controls personal data processed for this service. Address: Not configured (required before launch); privacy email: Not configured (required before launch); phone: Not configured (required before launch).
2. Information we collect
Depending on the features you use, we may process:
- Account and verification data, including business email, login identifier, verification status, and required review records.
- Advertising data, including company or product name, website, category, descriptions, logo, and information showing authority to represent the business.
- Order and payment records, including order number, amount, currency, payment status, provider transaction identifier, and refund records. BIDFOR does not store full card numbers or security codes.
- Technical and security data, including IP address, device and browser information, timestamps, activity, errors, and security events.
- Support communications and evidence provided to resolve a request.
3. Purposes
We use information to verify identities and businesses, publish and manage advertisements, create and reconcile orders, handle refunds and support, prevent fraud and abuse, maintain security, comply with accounting, tax, and legal obligations, and improve service reliability.
4. Service providers and disclosure
We share information only as needed with processors supporting enabled production features. These may include NewebPay for payments, Supabase for authentication and databases, hosting and cloud infrastructure, Cloudflare Turnstile for abuse prevention, email services, and enabled error-monitoring or rate-limiting services.
We do not sell personal data. We may disclose information where required by law, a court, or a competent authority, or where necessary to protect users, the platform, or third-party rights and safety.
5. Retention
We retain data as needed to provide the service, maintain accounts and advertisements, reconcile payments, resolve disputes, and meet accounting, tax, security, and legal obligations. When those purposes end and retention is no longer required, data is deleted, de-identified, or otherwise placed beyond identifiable use.
6. Cookies and local storage
We may use cookies or similar technologies needed for login sessions, language preferences, security, and core functionality. If non-essential analytics or marketing technologies are added, we will provide any additional notice or choice required by law.
7. Security
We use risk-appropriate access controls, encryption in transit, separation of privileges, logging, input validation, and payment-notification verification. No network transmission is absolutely secure. If an incident may affect your rights, we will investigate, remediate, and notify as required by applicable law.
8. Your rights
Email Not configured (required before launch) to exercise applicable rights to access, obtain a copy, supplement, correct, stop collection, processing, or use, or delete personal data. We may verify identity and retain records required for transactions, accounting, security, or disputes.
9. Children, international processing, and updates
This business advertising service is not directed to anyone under 18. Service-provider infrastructure may process data outside Taiwan; we require processors to protect data under contract and applicable requirements.
We may update this Policy for service or legal changes and will show the update date. Material changes will be communicated appropriately.