Bidder privacy policy
Effective October 16, 2026.
Bidder is a live auction app. This policy explains what personal data we process, why, who we share it with and how you exercise your rights, under Colombia's Law 1581 of 2012 and its regulations.
Data controller
Bidder, Inc. ("Bidder"), a Delaware corporation in the United States. Address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Email: soporte@bidder.tv.
Data we process
- Account: your email and your password, which we keep only in irreversible form (a hash), never readable. If you sign in with Google or Apple, the identifier, email and name that service gives us.
- Password recovery: when you ask to change your password, the one-time code we email you, also kept in irreversible form.
- Profile: username, display name, photo, banner, bio, social links and, if you sell, your seller category. If you do not upload a photo or banner, we assign default ones.
- Contact and shipping: your phone number and shipping address: recipient name, phone, street address, city, department and, if you pick a suggested address, its location on the map.
- Payments: your card details go to and are kept by our payment processor, Wompi. We keep the card brand, last four digits, expiry, the reference Wompi gives us, the payment email and your acceptance of Wompi's terms, never the full number or security code.
- Purchases and credit: your orders, payments, credit top-ups and balance, shop subscriptions and, if you sell, your sales and the payouts we make to you.
- Activity on Bidder: bids, maximum bids, the items and shows you publish, who you follow, what you like, the items you view, the alerts you ask for when an item goes live, your comments, your direct messages and your messages in show chats.
- Presence: whether you are online and when you were last active. In direct messages, when you are typing; we do not store the latter.
- Invitations: if you joined Bidder through someone's invitation, who invited you, from which show, and the phone number you signed up with, to check whether a reward applies.
- Live streams: if you sell live, the picture and sound from your camera and microphone are streamed to the people watching. We do not record the video or audio. We keep still images from the stream to show previews, and they are deleted automatically after 30 days.
- Device and technical logs: the token and device type for sending you notifications if you turn them on, and server logs such as your IP address and the request made, which can include what you type when searching for an address. We keep them for a limited time for security and troubleshooting.
- Website: when you visit bidder.tv, our hosting provider logs technical details of the visit, such as your IP address. The site uses no cookies or analytics tools.
- Support and safety: the emails you send us, disputes, and actions we take on an account.
We do not use third-party advertising or tracking tools. We measure how Bidder is used ourselves, for example how many times an item is viewed, to improve the service.
Why we use it
- To create and run your account, let you sign in and recover your password.
- To run auctions, purchases, sales, payments, credit, subscriptions, shipping and seller payouts.
- To show your profile, items and shows to other people.
- To send you notices about your account and orders by email and notifications.
- To run invitations and rewards, and prevent their abuse.
- To show sellers how many times their items were viewed, and to improve Bidder.
- To prevent fraud, protect the community and enforce our terms.
- To handle your requests and complaints, and meet legal, accounting and tax obligations.
What other people see
- Your username, display name, photo, banner, bio, items, shows, comments and messages in show chats.
- Whether you are online and when you were last active.
- Your username when you win an auction in a show.
- Sellers see how many times their items were viewed, not who viewed them.
- When you buy, the seller receives the shipping details needed to send your order.
Profile photos, banners and item photos are published at links that anyone with the link can open, including outside the app.
Who we share data with
We share data only with providers that help us run Bidder and process it on our behalf:
- Amazon Web Services: live streaming, storage of stream images, and sending email.
- Railway: hosting for our servers, our database and the photos you upload.
- Vercel: hosting for our website, bidder.tv.
- Wompi: payment processing.
- The carrier that delivers your order: the delivery name, address and phone number.
- Google: sign-in with Google and address suggestions as you type.
- Apple: sign-in with Apple.
- Expo: delivering notifications, through Apple and Google. A notification can include, for example, a show's name or an amount.
We may also share data when the law or a competent authority requires it.
International transfer
Our servers and several of our providers are in the United States, so your data is transferred to and stored there.
How long we keep it
- Your data, while you have an account.
- If you ask to delete your account, we lock it at once and delete it after 30 days; until then you can cancel the deletion. Our terms explain when an account cannot be deleted, for example while you have orders in progress.
- Records of orders, payments, payouts and credit are kept without your name, email, phone number or exact address for as long as the law requires, for accounting and tax obligations. We keep the shipping city and department, and photos of items you sold stay on those orders.
- Records of the emails we send you, 30 days.
- From each show's chat, only the most recent messages.
- Still images from streams, 30 days.
- Security records and records of actions on accounts, as long as needed to protect the community and handle complaints.
Your rights
As the owner of your data you can:
- Know, update and correct it.
- Ask for proof of the authorization you gave us.
- Find out how we have used it.
- Revoke your authorization and ask us to delete it, unless the law requires us to keep it.
- File complaints with Colombia's Superintendence of Industry and Commerce.
- Access it free of charge.
You can edit your profile in the app, delete your account in Profile → Settings → Delete account or at https://backend-production-71c0.up.railway.app/account/delete, or email us at soporte@bidder.tv. We answer queries within 10 business days and complaints within 15 business days; if we need longer, we tell you within the legal deadlines.
Minors
Bidder is only for people 18 and older. We do not knowingly collect data from minors. If you think a minor gave us their data, email us and we will delete it.
Security
We protect your data with technical and organizational measures such as encrypted connections, passwords kept in irreversible form and restricted access. No system is completely secure.
Changes to this policy
If we change it, we will publish the new version here with its effective date. If the change is important, we will also tell you in the app or by email before it applies.