Quick Bid — Privacy Policy
Last updated: July 23, 2026
Quick Bid is a browser extension that helps freight dispatchers prepare bid emails from a load board listing. This policy explains what data the extension accesses, how it is used, and who it is shared with. We keep data collection to the minimum needed for the extension to work.
What the extension accesses
- Email addresses (personally identifiable information). The email address you sign in with for your subscription, and the Gmail address you choose to send bids from, are used to verify your subscription and how many sending accounts a license uses.
- Personal communications. The extension reads a broker's contact email from the load listing to pre-fill a bid draft, and reads message subjects/senders in your open Gmail tab to show a timer on bids you sent and to alert you when a reply arrives.
- Website content. The extension reads load details shown on the load board page (origin, destination, miles, equipment, pieces/weight) and the open Gmail page to perform its functions.
- Bid activity statistics. When you send a bid or receive a reply, the extension records a small record (your email, your team code if set, the load's lane and rate, and the time) so you and your team can see bid counts and reply rates.
- Team load-market and match data. Active team membership requires sharing load ID, lane, miles, equipment, posted rate, source, and the names of assigned drivers whose vehicle matched a load. Broker email addresses and message bodies are not included.
- Team work-activity data. Active team membership also requires allowing Chrome's idle permission so the extension can record your browser's active / idle / locked state and, during a configured work shift, aggregate figures: total active time, number of breaks, and foreground time in the browser versus other applications. It does not capture keystrokes, screenshots, page contents, message contents, or the names of the specific applications or websites you use.
- Optional fleet-delivery alert and driver-reminder data. For a team, the server stores the team owner's fleet-alert switch and recipient plus each loaded vehicle's shared on/off preference for its current delivery. When fleet alerts are enabled, the extension sends the vehicle or driver label, truck number, route origin and delivery locations, delivery appointment, ETA, crossed timing threshold, and—when a current route forecast is available—the drive time and miles remaining. When an active team member asks to remind a driver, the server reads the driver's first saved email address, name, vehicle, and truck number from the team's shared vehicle list and generates the fixed reminder. The browser cannot choose the reminder recipient, subject, or message content.
- API status counters. Opening or refreshing matching status uses the authenticated session to read shared and per-license daily fallback counters. It sends no location and does not call or consume a Geoapify provider credit.
- Settings you enter. Your personal vehicle list, default rates, sending accounts, display name, alert preferences, optional Telegram/routing/EIA credentials, and optional PDF-signature settings are stored to run the extension and restore approved settings after sign-in.
How the data is used
- To open a pre-filled bid email draft in your own Gmail account. Quick Bid never sends bid emails on its own; you review and send them.
- To calculate distance, ETA, and transit time by sending the load's origin/pickup/delivery locations to mapping services.
- To verify your subscription and enforce the per-license limit on sending accounts.
- To show whether local matching and optional mapping providers are available and how much shared/per-license fallback quota remains.
- To show bid timers, notify you of replies, and produce your and your teams' bid statistics.
- If you join a team (via a team code), members of the same team can see each other's bid activity (who bid, the amount, and when) on shared loads.
- Team owners can see the full name of each active member and whether that member completed the required load/match and work-activity acceptance. License email addresses are not shown in the member list.
- For an active team member, the team owner can view a high-level summary of work activity during a configured shift.
- For an active team member, team History can show dispatcher totals and assigned-driver match counts.
- To send optional load alerts to your own Telegram, only if you configure it.
- To send optional fleet-delivery milestone alerts to the email address you choose when working solo, or the shared address configured by the team owner, only if fleet email alerts are enabled.
- To let an active team member send a fixed tracking-refresh reminder to a driver's first saved email address. Repeated reminders for the same driver and team include standard email-threading headers so the recipient's mail client can group them into the same conversation when supported.
Team features and activity monitoring (team members only)
Team membership is optional, but the two team-sharing requirements are mandatory while you are an active member. When you create or join a team, Quick Bid requires you to check both load-market/match sharing and work-activity sharing before team use can continue. A client version that does not contain this required interface is locked until it is updated. If you do not agree, you can leave the team (or delete a team you own) and continue using Quick Bid outside that team.
When you join a team you must enter a first name and last name so teammates and the team owner can identify you. The team owner can see your name, join date, and whether the required team acceptance is complete. Your license email is not shown in that member list. Your bids are shared team-wide as described above. Work-activity sharing records only your browser's active / idle / locked state and, during the shift hours the owner configures, aggregate figures: total active time, number of breaks, and foreground time in the browser versus other applications. The monitor deliberately does not record keystrokes, screen contents, page or message contents, or which specific applications or websites are used.
Where data is stored
Your browser keeps a local runtime copy of settings, team-acceptance state, and cached route results. Approved settings are also stored as one license-scoped AES-GCM encrypted record in Cloudflare D1 so they can be restored after sign-in on a fresh installation. The encryption key remains a Worker secret and is not stored in the extension or database record. Login sessions, team acceptance and idle-permission state, team-owned fleet data, histories, matcher data, Sheet snapshots, route/geocode caches and calculations, and alert deduplication state are excluded from that settings record. Subscription, seat, team-scoped acceptance records, statistics, fleet-alert deduplication records, shared team alert settings and per-delivery preferences, driver-reminder thread and attempt metadata, and shared geocoding/route fallback caches are separately stored on our server (Cloudflare). Shared map-cache keys are SHA-256 digests rather than raw locations; cached values contain coordinates or travel time and distance. For active team members, shared bids, your full name, shared team vehicle configuration (which may include saved driver phone numbers, driver email addresses, and route/appointment fields), assigned-driver match records, and aggregate work-activity figures are also stored on our server so they can be shared with your team.
Third-party services
- ExtensionPay / Stripe — handles your subscription and payment. Card details are entered on Stripe's secure page and are never seen or stored by the extension.
- U.S. Census Gazetteer — bundled U.S. city and ZIP coordinates are resolved locally by the extension without a network request.
- OpenRouteService, Geoapify, and OSRM — may receive location names or coordinates needed for geocoding, distance, ETA, and transit calculations. Geoapify is a server-side cached fallback and its API key is never sent to the extension.
- Our server (Cloudflare) — stores subscription/seat, team-scoped acceptance records, statistics, fleet-alert deduplication records, shared team alert settings and per-delivery preferences, driver-reminder thread and attempt metadata, and shared hashed geocoding/route cache entries and quota counters, and, for active team members, shared bids, your full name, shared team vehicle configuration (which may include saved driver phone numbers, driver email addresses, and route/appointment fields), assigned-driver match records, and aggregate work-activity figures.
- Resend — delivers optional fleet-delivery alerts to the team owner's configured address, fixed tracking-refresh reminders to the driver's saved email address, and account sign-in and purchase emails.
- Telegram — receives load alert messages only if you enable and configure Telegram alerts.
- Google (Gmail) — used to open the bid email draft in your chosen account.
Data sharing and sale
We do not sell your data. We share only the minimum data needed with the service providers described above to operate Quick Bid, and we do not use it for any unrelated purpose. We do not use it for advertising, creditworthiness, or lending. Bid activity, shared team vehicle configuration, assigned-driver match statistics, and aggregate work-activity data are shared only with the team you choose to join.
Data retention
Local settings and cached routes remain in your browser until you remove the extension or clear them. Server-side successful geocodes are cached for up to one year, driving routes for up to 30 days, and no-result lookups for up to six hours. Raw bid/reply, assigned-driver match, fleet-alert deduplication, and completed or explicitly failed reminder-attempt records are kept about 90 days. Unresolved reminder delivery attempts and their thread metadata may be retained until support resolution or team deletion so Quick Bid can fail closed instead of risking a duplicate email. Reminder thread roots are kept for the life of the team so later reminders can carry the same-conversation threading headers; deleting the team deletes those thread records. Daily totals are kept longer for historical stats. Shared team alert settings and per-delivery preferences are kept with the team. License records are kept while your subscription is active and can be reset on request.
Your choices
You may decline or withdraw the required team sharing by leaving the team in Settings; a team owner may instead delete the team. Quick Bid can then continue outside the team. While you remain an active team member, both required checkboxes must stay accepted. A team owner controls the shared fleet-alert switch and organization recipient, and active team members can turn alerts on or off for an individual loaded delivery. Driver reminder emails are sent only when an active team member requests one. You can remove locally stored data by uninstalling the extension. To remove or reset your encrypted settings backup, license, statistics, team-acceptance, or fleet-alert records, contact us at the email below.
Contact
Questions about this policy: niksafree@gmail.com