1. Who We Are
Ferra, Inc. is the controller of personal information processed through the Services, except where we act as a processor on behalf of our Customers (see Section 9). You can contact us at privacy@bidferra.com or by mail at the address listed in Section 13.
2. Information We Collect
We collect the following categories of personal information:
2.1 Account and Contact Information
When you register for or are invited to use the Services, we collect information such as your name, business email address, job title, employer or organization, phone number, and login credentials. For Customers, we may also collect billing contact and organizational details.
2.2 Uploaded Documents and Content
Our Services process construction documents and related files that you or your organization upload ("Customer Content"). These documents may contain personal information embedded by you or third parties, such as names, signatures, contact details, and other information appearing in plans, bids, contracts, and correspondence. We process Customer Content to provide the Services, including AI-assisted extraction, analysis, and organization of document data.
2.3 Usage and Device Analytics
When you use the Services, we automatically collect technical and usage information, including IP address, browser type, device identifiers, operating system, pages and features accessed, actions taken, timestamps, and referring URLs. We collect this information using cookies and similar technologies (see Section 8).
3. How We Use Your Information
We use personal information for the following purposes:
- To provide, operate, maintain, and improve the Services;
- To process Customer Content and deliver document analysis and processing outputs;
- To create and manage accounts, authenticate users, and provide customer support;
- To monitor, secure, and troubleshoot the Services, and to detect and prevent fraud or abuse;
- To analyze usage and performance in order to develop and improve features;
- To communicate with you about service-related matters, updates, and administrative notices;
- To comply with legal obligations and enforce our agreements.
3.1 Use of Customer Content for AI Processing
We use AI and machine learning systems to process Customer Content and generate outputs for you. Except as necessary to provide and support the Services, or as otherwise agreed in writing with a Customer, we do not use Customer Content to train AI or machine learning models for purposes unrelated to delivering the Services to that Customer. Where we use third-party AI providers to process Customer Content, we do so under agreements that restrict their use of that content to providing services to us (see Section 9).
4. How We Share Information
We do not sell personal information. We may share personal information in the following circumstances:
- Service providers and sub-processors: With third parties that perform services on our behalf, such as cloud hosting, AI processing, analytics, and customer support, subject to contractual confidentiality and security obligations.
- Within your organization: With other authorized users and administrators of your Customer account, consistent with the access controls configured by your organization.
- Legal and safety: When required to comply with applicable law, legal process, or governmental request, or to protect the rights, property, or safety of Ferra, our users, or others.
- Business transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of the transaction.
- With your direction or consent: When you or your organization direct us to share information, or where you have otherwise consented.
5. Data Retention
We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer Content is retained in accordance with the applicable Customer agreement and the configuration choices made by the Customer. When personal information is no longer needed, we will delete or de-identify it in a secure manner. Upon termination of a Customer agreement, we will delete or return Customer Content as provided in that agreement.
6. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit, access controls, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Choices and Rights
Depending on your location and applicable law, you may have rights regarding your personal information, including the right to access, correct, update, or delete your information, and to object to or restrict certain processing. To exercise these rights, please contact us at privacy@bidferra.com.
Where Ferra processes Customer Content as a processor on behalf of a Customer, requests from individual end users regarding that content will generally be directed to the relevant Customer, who controls that data. We will assist our Customers in responding to such requests as required by applicable law and our agreements.
You may opt out of non-essential marketing communications at any time by following the unsubscribe instructions in those messages. Service-related and administrative communications are not subject to opt-out while you use the Services.
8. Cookies and Similar Technologies
We use cookies, web beacons, and similar technologies to operate and secure the Services, remember your preferences, authenticate users, and analyze usage. You can control cookies through your browser settings, although disabling certain cookies may affect the functionality of the Services. Where required by law, we will obtain your consent before placing non-essential cookies.
9. Third-Party Service Providers and Sub-Processors
We engage trusted third-party service providers to support the Services, including cloud infrastructure and AI processing providers. These providers are authorized to process personal information and Customer Content only as necessary to perform services for us and are bound by appropriate confidentiality and data protection obligations. A current list of sub-processors may be made available to Customers upon request.
10. Children’s Privacy
The Services are intended for business use and are not directed to children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it.
11. International Data Transfers
Ferra is based in the United States, and we process and store information in the United States and other locations where we or our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in countries that may have different data protection laws than your country of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice. Your continued use of the Services after the updated Policy becomes effective constitutes your acknowledgment of the changes.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Ferra, Inc.
Attn: Privacy
817 Broadway, Floor 7
New York, NY 10003
Email: privacy@bidferra.com