Last updated: September 28, 2026
The privacy of your data (and it is your data, not ours!) is a big deal to us. In this policy, we lay out: what data we collect and why; how your data is handled; and your rights with respect to your data. We promise we never sell your data: never have, never will.
This policy applies to bluepeakdataconsulting.com and to the Monday Bid Board, both run by Blue Peak Data Consulting LLC, a Kansas limited liability company (“Blue Peak,” “we,” “us”). It does not apply to Blue Peak’s consulting engagements, which are covered by their own contracts.
This policy applies to our handling of information about site visitors, prospective customers, and customers and authorized users (in relation to their procurement of the services and management of their relationship with Blue Peak). We refer collectively to these categories of individuals as “you” throughout this policy.
The Monday Bid Board is a weekly service for businesses that sell to government. It is not offered to consumers.
This policy is split into sections:
- What we collect and why
- When we access or disclose your information
- Cookies and Google Analytics
- Your rights with respect to your information
- How we secure your data
- Data retention and deletion
- Location of site and data
- Children
- Changes and questions
What we collect and why
Our guiding principle is to collect only what we need. Here’s what that means in practice:
Our contact form
When you submit the contact form on our website, we collect the information you provide: your name, email address, phone number (optional), and the details of your inquiry. We use this information solely to respond to your inquiry and discuss potential work. The form entry is stored in our website’s database, and a copy is emailed to our business mailbox. We do not sell, rent, or share this information with third parties for marketing purposes.
Identity and access
When you sign up for the Monday Bid Board, we ask for identifying information such as your name, email address, role and company name, and the same for any colleague you add to your firm’s board. That’s so we can set up your firm’s board, send it to the right people, and send you other essential information about the service.
We’ll never sell your personal information to third parties, and we won’t use your name or company in marketing statements without your permission either.
Your firm profile
To match solicitations to your firm, we ask for the services your firm sells, the states it works in, its size band, and anything you want excluded. This describes your business, not you personally, and we treat it as your firm’s confidential information under our Terms of Service.
Bids you send us for a backtest
If you take part in a free backtest, you send us solicitations your firm has already decided and your bid or skip call on each. We use them only to produce your backtest and to measure our miss rate in a form that does not identify your firm.
The boards and your replies
We keep the boards we send you, your replies, any verdicts you dispute, and any feedback, so we can answer you, re-read a disputed document, and measure how often our verdicts are wrong.
Billing information
When we start taking payments for the Monday Bid Board, you will be asked to provide your payment information and billing address. Credit card information will be submitted directly to our payment processor, Stripe, and will not hit Blue Peak servers. A record of the payment transaction, including the card brand and the last 4 digits of the credit card number, will be kept in our Stripe account for purposes of account history, invoicing, and billing support. We will store your billing address and the state and ZIP code of your firm so we can charge you for service, calculate any sales tax due, send you invoices, and detect fraudulent credit card transactions.
Website interactions
We collect information about your browsing activity on bluepeakdataconsulting.com for analytics and statistical purposes, so we can see how visitors find and use the site. This includes, for example, your browser and operating system versions, which web pages you visited, and which website referred you to us. Like most websites, our hosting infrastructure may automatically log standard technical data such as IP addresses, browser type, and pages visited; we use that data only for site operation and security. Google Analytics collects the rest, as described in “Cookies and Google Analytics” below.
Voluntary correspondence
When you email Blue Peak with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future.
We also store information you may volunteer, for example, your written feedback on a verdict.
Information from other sources
If we emailed you first, we found your business email address in a public source, such as your firm’s own website or a public award notice or bidder list, and we record where it came from. If a colleague added you to your firm’s board, we received your name and email from them.
What we don’t collect
We do not collect sensitive personal information (health data, government ID numbers, precise location or biometric data), and we do not knowingly collect information from anyone under 18.
When we access or disclose your information
To provide products or services you’ve requested. We use some third-party service providers to run the website and the Monday Bid Board. Each receives only what its role needs.
| Service provider | What it does for us | What it handles |
|---|---|---|
| Anthropic, PBC (Claude) | Reads public solicitation documents and firm profiles to draft verdicts | The matching fields of your firm profile (services, states, size band, exclusions) and public solicitation text |
| Namecheap, Inc. (EasyWP) | Hosts our website | Server logs and contact form entries |
| Brevo | Delivers the website’s contact form notices to our mailbox | The contents of the form you submit |
| Microsoft 365 | Our business mailbox | Your email address and the emails we exchange, including boards |
| Google LLC (Google Analytics 4) | Website analytics | Cookie identifiers, pages viewed, device, browser and approximate location |
| Stripe, Inc. (when we start taking payments) | Payments and subscription billing | Card details (held by Stripe, not us), billing name and address, subscription status. Stripe’s privacy policy |
About Claude. We use Anthropic’s Claude to read solicitations and firm profiles. Anthropic processes this data under its own terms and privacy policy.
When a Blue Peak person looks at your data. A person at Blue Peak reads your firm profile, your boards or your replies only to check a sample of verdicts before they go out, to answer your questions or a disputed verdict, or to fix a problem.
Blue Peak’s own bidding. Blue Peak also bids on government work. Your profile, your boards and your decisions are never used in any bid of ours or shared with any partner or subcontractor. Our Terms of Service make this a contractual promise.
To enforce our terms. If we find the service being used against our Terms of Service, for example to resell boards, we may look at the account involved and act as the terms allow.
Aggregated and de-identified data. We may aggregate and/or de-identify information collected through the service, for example to compute and report our overall miss rate. Aggregated or de-identified data never identifies you or your firm, or which solicitations your firm pursued.
When required under applicable law. Blue Peak is a U.S. company.
- Requests for user data. Our policy is to not respond to government requests for user data unless we are compelled by legal process or in limited circumstances in the event of an emergency request. However, if U.S. law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring us to disclose data, we must comply. It is Blue Peak’s policy to notify affected users before we disclose data unless we are legally prohibited from doing so, and except in some emergency cases.
- If we are audited by a tax authority, we may be required to disclose billing-related information. If that happens, we will disclose only the minimum needed, such as billing addresses and tax exemption information.
Finally, if Blue Peak or the Monday Bid Board is acquired by or merges with another company (we don’t plan on that, but if it happens), we’ll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.
Cookies and Google Analytics
A cookie is a piece of text stored by your browser. It may help remember login information and site preferences. It might also collect information such as your browser type, operating system, web pages visited, duration of visit, content viewed, and other click-stream data. You can adjust cookie retention settings and accept or block individual cookies in your browser settings. Blocking cookies does not affect the weekly board, which arrives by email.
This site uses Google Analytics 4, a service of Google LLC, to understand aggregate site usage: which pages are viewed, how visitors arrive, and general location and device type. Google Analytics sets cookies in your browser. We use this information only in aggregate to improve the site. We do not use it to identify individual visitors, we do not run advertising or retargeting trackers, and we do not display ads. Google may collect information about your activity on our site and on other sites that use Google services. You can read how Google uses information from sites that use its services at www.google.com/policies/privacy/partners/, and Google’s own privacy policy at policies.google.com/privacy. You can opt out of Google Analytics on all websites using Google’s browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser settings.
Do Not Track. Our website does not currently respond to browser Do Not Track signals, because there is no common standard for them.
Your rights with respect to your information
At Blue Peak, we strive to apply the same data rights to everyone, regardless of their location. Some of these rights include:
- Right to Know. You have the right to know what personal information is collected, used, shared or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
- Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
- Right to Correction. You have the right to request correction of your personal information.
- Right to Erasure. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, from all of our service providers. If you ask us to erase the contact details your firm’s board goes to, we can no longer send you the board.
- Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed, including opting out of sale of your personal information. (Again: we never have and never will sell your personal data.)
- Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.
- Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party. Email us and we will send you a copy.
- Right to Non-Discrimination. We do not and will not charge you a different amount to use our products, offer you different discounts, or give you a lower level of customer service because you have exercised your data privacy rights. However, the exercise of certain rights may, by virtue of your exercising those rights, prevent you from using our Services.
You can also stop commercial email from us at any time by replying “stop,” and we will honor it within 10 business days. A colleague your firm added to its board can ask us to remove them at any time.
Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain billing records for tax purposes.
In some cases, we also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. If we are unable to verify you, we may be unable to respond to your requests. If you have questions about exercising these rights or need assistance, please contact us at sergei@bluepeakdataconsulting.com or at Blue Peak Data Consulting LLC, 10420 S Ridgeview Rd #1022, Olathe, KS 66061. Because we operate only online and deal with you directly, email is the method we provide for requests. We will respond within 45 days and tell you if we need longer. If an authorized agent is corresponding on your behalf, we will need written consent with a signature from the account holder before proceeding.
Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. We will provide information about how to exercise that right in our response denying the request.
California residents. We do not sell or share your personal information, and we do not use or disclose sensitive personal information. This policy is posted to meet the California Online Privacy Protection Act, which asks us to list the categories of information we collect and the third parties we share it with, describe how you can review and request changes to it, explain how we tell you about changes, show the effective date, and say how we respond to Do Not Track signals and whether other parties may collect information about your activity across sites. Those items are in the sections above and in “Changes and questions” below.
How we secure your data
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. We will keep your firm’s profile and boards apart from Blue Peak’s own consulting and bidding files, with access limited to the people who run the service. Payment card details will never touch our systems. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.
Data retention and deletion
We keep your information for the time necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Here are the specific periods:
| Information | How long we keep it |
|---|---|
| Contact form submissions | As long as needed to respond to and follow up on your inquiry, or until you ask us to delete them |
| Firm profile and contact details | While your subscription or pilot is active, and 90 days after it ends, then deleted |
| Boards, replies and disputed verdicts | Three years, for our miss-rate record, then de-identified or deleted |
| Backtest solicitations and your bid or skip calls | De-identified within 90 days of the backtest, when the identified copy is deleted |
| Billing records | As long as tax law requires |
| Website analytics | For the data retention period set in our Google Analytics account |
| Data processed by Claude | Under Anthropic’s own terms and privacy policy |
If you cancel, you keep receiving boards to the end of the period you paid for. If you ask us to delete your information, we will delete it within 30 days, except records we must keep for billing, tax or legal reasons and aggregate statistics that cannot identify you or your firm.
Location of site and data
Our website and the Monday Bid Board are operated in the United States and offered to U.S. businesses. If you are located outside of the United States, please be aware that any information you provide to us will be transferred to and processed in the United States. By using our websites or Services and/or providing us with your personal information, you consent to this transfer.
Children
The website and the Monday Bid Board are not directed to children, and we do not knowingly collect information from anyone under 18.
Changes and questions
We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies, we will refresh the date at the top of this page, and for a material change we will email active customers and pilot firms at least 30 days before it takes effect.
Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at sergei@bluepeakdataconsulting.com and we’ll be happy to try to answer them!
Blue Peak Data Consulting LLC
10420 S Ridgeview Rd #1022, Olathe, KS 66061
sergei@bluepeakdataconsulting.com · (913) 777-4770
Attribution and changes made
Adapted from the Common Paper Cloud Service Agreement and the Basecamp open-source policies, licensed CC BY 4.0. 37signals (Basecamp) and Common Paper do not endorse Blue Peak or the Monday Bid Board.
Changes made. This policy adapts the Basecamp Privacy policy (37signals LLC, last updated April 20, 2023). “37signals” and its product names were replaced with Blue Peak, our website and the Monday Bid Board. We kept Basecamp’s structure and much of its wording, including the opening, the rights list, the government-request and tax-audit paragraphs, the cookie definition, and the retention, location and changes paragraphs. We rewrote identity, billing, website, security and deletion to match what we do, and replaced punctuation to fit our style. We added the contact form, firm profile, backtest, boards, other-sources and what-we-don’t-collect sections, the service provider table, the Claude paragraph, the paragraphs on when a person at Blue Peak looks at your data and on Blue Peak’s own bidding, the Google Analytics paragraph, Do Not Track, the “stop” line, the California paragraph, the retention table and Children. We removed practices we don’t have: newsletters and surveys, signup IP logging, CAPTCHA and ad cookies, advertising, interview recordings, mobile apps, integrations, the EU transfer section, and Basecamp’s promise that no person looks at your content, which would not be true here. No Common Paper text appears in this policy; its name is in the line above because our Terms, Pilot Terms and this policy share one attribution line.