BIDORO

Privacy Policy

Bidoro ("Bidoro," "we," "us") is quoting, proposal, e-signature, and payment software for ground-transportation companies, operated by DCAcar (Washington, DC). When you request a quote, sign a proposal, or make a payment through a Bidoro-powered page, you are dealing with the transportation operator named on that page (for example, DCAcar); Bidoro processes your information on that operator's behalf. This policy explains what is collected, how it is used, and the choices you have.

1. Information we collect

• Contact details you provide — name, email address, phone number, company.
• Trip details — pickup and drop-off locations, dates and times, passenger and luggage counts, and the text of your request. If you use the voice option, your speech is converted to text by your own browser; we receive and store the text, not audio.
• Quotes, proposals, and signature records — the proposals prepared for you and, if you sign electronically, your typed name together with the date, time, IP address, and browser identifier, kept as the audit record of your consent.
• Payment records — amounts, dates, payment method type, and references. Card and bank numbers never touch Bidoro's systems: payments are processed by Stripe, a PCI-DSS–certified processor, on Stripe's own pages (Stripe's privacy policy).
• Source and measurement data — if you arrive from a link or advertisement, we may record the referring page and standard campaign identifiers (such as UTM tags and Google/Meta/Microsoft click IDs), so the operator knows which channel brought you.
• Technical basics — IP address, browser type, and pages viewed, collected as part of normal web serving and abuse prevention (rate limiting).

2. How it is used

To understand your request and prepare quotes and proposals; to provide the transportation services you book; to process payments, deposits, and refunds; to send service communications about your quote or booking (confirmations, reminders, balance requests); to keep signature and payment records the law requires; to secure the service against abuse; and to measure which marketing channels lead to real bookings.

3. What we share — and with whom

We do not sell personal information. We share it only with service providers that make the product work, each bound to use it solely to provide their service:

• Stripe — payment processing.
• Google Maps Platform — the addresses in your trip are sent to Google to measure route distance and suggest addresses.
• AI providers (Anthropic, Google) — the text of your request may be processed by an AI service to structure it into a quote. These providers process it on our instructions and do not use it to train their models under our agreements.
• Email delivery (Resend) and hosting/database (Vercel, Neon) — infrastructure that stores and transmits the data described above.
• Advertising measurement (Google Ads, Meta) — only if the operator has enabled it, and only to measure advertising: when a proposal is signed or paid, we may report that a conversion of a given value occurred, matched by the click ID from the ad you used or by a one-way hashed (SHA-256) version of your email address. Your readable email address, your trip details, and your documents are never sent to advertising platforms.
• Legal — if required by law, subpoena, or to protect rights and safety.

4. Cookies

Staff sign-in uses a session cookie. Public quote and proposal pages work without advertising cookies; campaign identifiers arriving in the page address may be kept briefly in your browser's own storage so your request is credited to the right channel. We do not run third-party advertising trackers on these pages.

5. Retention

Quotes, signed proposals, signature audit records, and payment records are retained for as long as the operator needs them for its business and as required for legal, tax, and accounting purposes. Website quote requests that never become bookings may be deleted earlier.

6. Security

All traffic is encrypted in transit (HTTPS). Access to operator data requires authenticated staff accounts with role-based permissions. Payment credentials are handled exclusively by Stripe. No method of transmission or storage is 100% secure, but we design so that the most sensitive data — card numbers — never reaches us at all.

7. Your choices and rights

Depending on where you live (including California, Virginia, Colorado, and other states with privacy laws), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain sharing. To exercise any of these, contact the operator you did business with, or email info@dcacar.com — we will verify your request and respond within the time the law requires. We do not discriminate against you for exercising privacy rights.

8. Children

Bidoro-powered pages are intended for adults arranging transportation and are not directed to children under 13. We do not knowingly collect personal information from children; passenger counts may include minors traveling with the adult who booked.

9. Changes

If this policy changes materially, the effective date above will change and the current version will always live at bidoro.ai/privacy.

10. Contact

Questions about this policy or your data: info@dcacar.com, or write to DCAcar, Washington, DC.