Privacy Policy
Last updated November 5, 2026
Bagel is run by Aaron Wertman. This explains what we keep, why, and who helps us run the service. In short: we keep only what Bagel needs to work, we never sell it, and contractors own their data.
What we keep
- Contractors and their teams: name, email, a scrambled (hashed) password we can't read, business details from Settings, and when you were last active.
- Jobs: what contractors enter: job descriptions, addresses, estimates, schedules, change orders, contracts, invoices, and the plans and photos they upload.
- Clients (homeowners): the name and email the contractor adds, and anything the client sends on their project page (messages, ideas, photos, files, answers, approvals and signatures with their typed name).
- Subcontractors: the name they type when approving selections, and an email if the contractor sends them a summary.
- Payments: handled by Stripe. We never see or store card numbers; we keep only whether a subscription is active.
Why
Only to run Bagel: show each person the right information, send the emails you'd expect (a change order to sign, a reply, a password reset), keep the service secure, and improve it. We don't sell personal information and we don't use it for advertising.
Who helps us
- Render hosts Bagel and stores its data.
- Anthropic provides the AI. Job descriptions, plans, photos and updates a contractor asks Bagel to draft from are sent to it to create the draft.
- Resend delivers Bagel's emails.
- Mapbox suggests addresses as a contractor types one.
- Stripe handles subscription payments.
Each only gets what it needs for its part, under its own privacy and security commitments.
Who can see what
- A contractor's team sees that company's jobs. No other company can.
- A client sees their own project page through a private link. A subcontractor sees only the products and finishes for their part of the work, never prices or the client's contact details. Anyone given one of these links can open it, so share them only with the right people; the contractor can replace a subcontractor's link at any time.
- Bagel's support staff can see an account to help fix a problem; every such visit is logged.
How we protect it
Bagel uses encrypted connections (https), stores passwords only in scrambled form, limits repeated login attempts, and backs up its data regularly.
Keeping and deleting
We keep data while an account is open. A contractor can ask us to delete their company and everything in it (jobs, files, client details); it's then removed, and backups that contain it roll off within 30 days. Clients and subcontractors with questions about their information should contact the contractor they work with, or us.
Questions
Write to support@bagelbuild.com.