GleamBid Privacy Policy

Last updated: August 10, 2026

GleamBid ("GleamBid," "we," "us") provides an embeddable instant-quote widget and a lightweight lead/booking dashboard for home-service businesses ("Operators"). This policy explains what we collect from Operators and from the visitors ("Visitors") who use an Operator's embedded quote widget, and what we do with it.

Who this applies to

There are two kinds of people whose data GleamBid handles:

• Operators — the home-service business that signs up to use GleamBid on their own website.
• Visitors — a homeowner or prospective customer who fills out an Operator's embedded quote widget.

What we collect

From Operators: business name, login email, the pricing/service details they configure, and — only if they choose to connect it — access to their calendar (see "Calendar access" below).

From Visitors: the information they type into a quote widget (name, email address, phone number if given, property address, and job details such as number of windows, house stories, or gutter footage), plus the IP address of the request, used only for spam/abuse rate-limiting.

We do not collect payment card numbers, government ID numbers, or health information, and we do not use tracking cookies or advertising pixels of any kind.

Calendar access (Google Calendar / Apple Calendar)

If an Operator chooses to connect a calendar, GleamBid requests permission to:

• Check free/busy time on that calendar, so the quote widget can offer real open appointment slots to a Visitor.
• Create new calendar events when a Visitor books a slot, so the appointment appears on the Operator's own calendar.

We request the narrowest permission scopes available for this (Google's calendar.freebusy scope for the availability check, and calendar.events for creating the booking) — GleamBid never reads the title, description, attendees, or other details of an Operator's existing calendar events beyond whether a given time is busy or free. Calendar data is never shared with any third party, never used for advertising, and never read outside of the specific availability-check and event-creation actions described above. An Operator can disconnect calendar access at any time from their GleamBid dashboard, which stops all future access.

How we use this information

• To compute and deliver an instant quote to a Visitor.
• To let an Operator see, track, and follow up on their own leads.
• To check calendar availability and book a confirmed appointment, if calendar access is connected.
• To send transactional email (a copy of a quote, a lead notification to the Operator, a login link, a booking confirmation, a follow-up reminder if a quote hasn't been acted on, or a reminder that a recurring service is due again, if an Operator has set one up).
• To prevent spam and abuse of the quote widget.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

Who we share data with

GleamBid runs on infrastructure operated by Cloudflare (hosting and database) and Resend (transactional email delivery). If an Operator connects a calendar, we also exchange data with Google or Apple as described above. These providers process data on our behalf to operate the service and are not permitted to use it for their own purposes.

Data retention and deletion

Lead, quote, and customer/service-history data is retained for as long as an Operator's account is active, so they can maintain their own customer history. An Operator can permanently delete any individual lead or customer record directly from their own dashboard at any time — this is a real, immediate deletion, not a request that has to be routed to us. A Visitor who wants their data removed can ask the Operator directly (using the contact information on the Operator's own site), or contact us (below) and we'll delete it on their behalf. Calendar access tokens are deleted immediately when an Operator disconnects their calendar.

Security

All traffic to GleamBid is encrypted in transit (HTTPS). Calendar access tokens are encrypted at rest. Access to the Operator dashboard requires a signed, time-limited login link sent to the Operator's own email address — GleamBid does not use or store passwords.

Contact

Questions about this policy, or a request to access/delete your data, can be sent to [email protected].

Changes to this policy

If this policy changes materially, we'll update the date at the top of this page.