What are you looking for?

Privacy Policy

Last updated: October 18, 2026

This Privacy Policy explains how Yeap Inc. (“Yeap”, “we”, “us”) collects, uses and shares personal information in BidTrails (bidtrails.com) and TeamBench (teambench.biz) (the “Services”). Your sign-in account is a Yeap ID account, which is also covered by the Yeap ID Privacy Policy.

The Services are business tools. Most of the information in them is your company’s business information. Where your company adds information about other people, such as buyer or teaming-partner contacts, your company decides what to add and is responsible for having the right to do so.

1. Information we collect

From your Yeap ID account

  • Your name, your verified email address, your Yeap ID user identifier, the companies (organizations) you belong to, and your role in each.

BidTrails workspace content

  • What your company’s members add: opportunities, deadlines, notes, activity, contacts, documents, divisions, settings and reminder preferences.
  • An audit trail of who changed what and when.

TeamBench listings and directory activity

  • Your company’s listing: company name, UEI and CAGE code, website, location, capabilities, NAICS and PSC codes, certifications, past performance, key personnel, bonding, contract vehicles, equipment, and the contact details you choose to share.
  • Views: we keep daily counts of views of each listing, and of downloads of its capability statement, by type of viewer and, when the viewer is signed in with a company, which company it was; for a government user, we keep only their email domain (for example va.gov), never their name or address. A listing on TeamBench Pro or with a Featured placement can see the names of the BidTrails companies, and the domains of the government users, that viewed its profile or downloaded its capability statement in the last 30 days.
  • Logos and photos: a TeamBench Pro listing can upload a logo and up to six photos. We store them with the listing and show them on the listing and in its capability statement until the company removes them.
  • Unlocks and requests: when a company unlocks your contact details or asks to connect, we record which company did so and when.
  • Reports of listings and how they were resolved.
  • Public business information from SAM.gov: for companies registered in SAM.gov, we display the public entity registration data that the U.S. General Services Administration publishes. That is the company name and DBA, the physical address (city, state and ZIP code only for sole proprietors), website, UEI and CAGE code, NAICS and PSC codes, business types, SBA program status, and registration status and dates. We don’t collect the points of contact listed in SAM.gov, and SAM.gov’s public data doesn’t include their email addresses or phone numbers.
  • Claim verification: when you claim a listing with a one-time code, we keep a masked form of the email address or phone number we sent it to, a one-way hash of the code, and when it was sent and used.

Billing

  • Stripe processes card and payment details; we never see or store full card numbers. We keep references such as your Stripe customer and subscription IDs, your plan, billing period and payment status. When you pay with PayPal (a BidTrails plan or TeamBench Pro), PayPal processes the payment, and we keep the PayPal subscription ID, your plan, billing period and payment records.
  • Yeap ID applies any discount or wallet balance at checkout and keeps those records.

Optional BidTrails AI

  • When your company opts in, OpenAI receives your matching profile (NAICS codes, certifications, states served and matching keywords) and public SAM.gov notice text to write fit notes. The current feature does not send uploaded proposal documents to OpenAI.
  • We store your matching preferences, suggestions, AI fit notes, decisions and decline reasons, plus a per-company usage ledger with model, feature, token counts, dates and related notice or opportunity identifiers. Billing records include the accepted AI Terms version and subscription status. Requests contain only the requesting company’s profile and public notice text.
  • Stripe stores and processes your payment method for authorized trial-end charges and recurring payments. BidTrails stores references and billing status, not full card details.

Support

  • Messages you send through the support chat or contact forms, and our replies.

Technical and usage information

  • Server and security logs, such as IP address, browser type, pages requested and timestamps.
  • Cookies that keep you signed in and protect forms. If you arrive through a Yeap partner’s referral link, a cookie records the referral.
  • On TeamBench’s public pages, analytics tags from Google (Google Tag Manager and Google Analytics) collect information about how visitors use those pages. BidTrails pages don’t load these tags.

2. How we use information

  • To provide the Services: sign you in, show each company only its own workspace, enforce roles, send the reminders you turn on, and run the TeamBench directory.
  • To bill for plans, apply discounts, and prevent and investigate fraud and abuse.
  • To answer support requests and send service messages, such as reminders, billing notices and changes to these policies.
  • To keep the Services secure, fix problems and improve them, including by measuring use of TeamBench’s public pages.
  • To pay partner commissions when you join through a partner’s referral.
  • To comply with law and enforce our terms.

We don’t sell personal information, and we don’t use your workspace content for advertising.

3. Who can see your information

  • BidTrails workspaces are visible only to the members of your company, according to their role.
  • TeamBench listings:
    • Search results show basic listing fields to everyone; visitors who aren’t signed in see the first pages of each search.
    • Basic listing fields are visible on each listing’s page to everyone and are indexed by search engines such as Google and Bing, unless the listing’s owner keeps it out of search engines.
    • Full profiles, including the SAM.gov address, UEI and CAGE code, are visible to companies with a BidTrails plan and to government users signed in with a verified .gov, .mil or .fed.us email.
    • Contact details are shown only on unlock or after you accept a request, depending on the setting you choose.
  • Yeap staff access Customer Content only to provide support you ask for, to keep the Services secure, to investigate abuse, or when the law requires.
  • Partners. If you arrive through a partner’s referral link, the partner may learn that a referral converted and earn a commission from your payments. Partners don’t get access to your workspace.
  • Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, safety or property of Yeap, our users or the public.
  • Business transfers. If Yeap is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

4. Service providers

We use these providers to run the Services. They process information for us under contract.

  • Amazon Web Services: hosting, private document storage (Amazon S3) and email delivery (Amazon SES), in the United States.
  • Cloudflare: network security and content delivery.
  • Stripe: payment processing.
  • PayPal: payment processing when you pay with PayPal.
  • OpenAI: support-chat answers for messages you type there, and optional BidTrails AI fit notes using the matching profile and public solicitation text described above. We do not opt your data into model training. OpenAI states that API inputs and outputs are not used for training by default and that abuse-monitoring logs may contain content and be retained for up to 30 days, or longer for legal or safety reasons. BidTrails does not promise zero retention. See OpenAI API data controls.
  • Microsoft: delivery of support conversations to our staff when you ask for a person.
  • Google: analytics on TeamBench’s public pages.
  • Yeap ID (Yeap’s own sign-in service) and its providers, including AWS, Vercel and Neon, as described in the Yeap ID Privacy Policy.
  • YeapTel (Yeap’s own phone service) and its carriers: text messages with claim verification codes.

The SAM.gov business information on TeamBench comes from the U.S. General Services Administration’s public data. GSA is not our service provider and doesn’t endorse the Services.

5. AI support chat

When you use the support chat, your messages are sent to an AI provider (OpenAI) to answer you. A person on our team may see the conversation if you ask for one. Your BidTrails records and documents are not sent to the AI provider unless you type them into the chat, and we don’t use your workspace content to train AI models.

6. How long we keep information

AI profiles, fit notes and decisions follow the workspace retention and deletion rules below. AI usage and payment records are retained as needed for billing, fraud prevention and accounting. Turning off or canceling AI stops new AI processing; it does not automatically delete your workspace history. Your company owner can request deletion through the contact below. Provider-held copies follow the provider retention rules described above.

  • Your account and workspace, for as long as your company uses the Services.
  • Archived records. BidTrails archives instead of deleting so you can restore records. Archived records and documents stay with your workspace.
  • Ended plans. When a plan ends, the workspace is read-only for 30 days, then closed. We keep a closed workspace’s data so that you can reactivate it, until your company asks us to delete it.
  • Deletion on request. Your company’s owner can ask us to delete the company’s BidTrails data or TeamBench listing at [email protected]. We delete it from the Services and document storage within 30 days. Copies in our server backups expire within 7 days after that.
  • SAM.gov listings, while the registration is active in SAM.gov’s public data. A listing whose registration lapses leaves search; a company can ask us to hide its listing at any time.
  • Claim verification records (masked email address or phone number and the hash of the code), for 90 days.
  • Billing records, as long as tax and accounting law requires.
  • Security logs, for up to 90 days unless needed longer to investigate an incident.

7. Security

We protect information with measures that include:

  • separation of each company’s data, enforced in one data layer with automated tests;
  • private, encrypted document storage with no public links, and integrity checks on every file;
  • encrypted connections (TLS);
  • service keys kept outside the database, with least-privilege access;
  • audit logs; and
  • daily server backups kept for 7 days.

No system is perfectly secure. The Services are not certified under FedRAMP, CMMC or similar programs and must not be used for classified information or CUI (see our Terms of Service). If we learn of a breach affecting your information, we will notify you without undue delay as required by law.

8. Your choices and rights

  • Access and export. Members can export opportunities as CSV, and the owner can download a full backup.
  • Correction. You can edit your profile in Yeap ID, and your company can edit its workspace and listing.
  • Listing visibility. You choose how your TeamBench contact details are shared, and you can ask us to hide or remove your listing, including a listing created from SAM.gov data.
  • Deletion. Ask us as described above, or delete your Yeap ID account under the Yeap ID Privacy Policy.
  • Analytics. You can block Google Analytics with your browser settings or Google’s opt-out add-on.
  • Privacy rights requests. Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, and to appeal our decision. Send requests to [email protected]. We will verify the request and respond within the time the law requires, and we won’t discriminate against you for using these rights.
  • If your information is in a workspace or listing that another company controls, we may refer your request to that company.

9. Children

The Services are for businesses and are not directed to children. We don’t knowingly collect information from anyone under 18.

10. Where information is processed

We are based in the United States and process information in the United States.

11. Changes to this policy

We will post updates here with a new “Last updated” date and give notice in the Services or by email when a change is material.

12. Contact

Yeap Inc.
Privacy: [email protected] · Support: [email protected] · Security: [email protected]