We collect information you provide directly to us, including:

We automatically collect certain information when you use our Platform:

Several features are powered by artificial intelligence. When you use them, the content involved is processed by our AI infrastructure providers to generate the result. The models are Anthropic's; requests reach them either directly or through OpenRouter, an AI routing service that forwards each request to a provider serving that model (Anthropic, or Anthropic's models hosted on Amazon Bedrock or Google Cloud Vertex AI):

We send only what the feature needs, our providers process it on our behalf, and we do not permit them to use your content to train their models under our agreements with them.

Automated processing does not make decisions about you that have legal or similarly significant effects. An AI estimate is an indicative range; prices are set by independent providers, and a person reviews any account action taken because of automated moderation if you ask us to.

We use collected information to:

We share your information only in these circumstances:

We never sell your personal information to third parties.

Payment processing is handled by Stripe. We do not store your complete credit card numbers or bank account details on our servers. Stripe's privacy policy governs how they handle your payment information.

For sellers, we store your Stripe Connected Account ID to facilitate payouts but do not have access to your complete banking details.

We implement industry-standard security measures to protect your information:

However, no security system is impenetrable. You are responsible for maintaining the confidentiality of your account credentials.

If a security incident affects your personal information, we will notify you and the relevant authorities as required by applicable law.

We retain your information for as long as your account is active or as needed to provide services. Even after account deletion, we may retain certain information to:

You have the right to:

To exercise these rights, contact us at privacy@timber.bid or use the privacy settings in your account. Account and data deletion is available in-app and described at timber.bid/public/legal/delete-account.

We collect location data to show nearby listings and calculate delivery distances. You can control location permissions through your device settings. Some features may be limited if location access is denied.

Live delivery tracking: during an active delivery, a driver's real-time GPS location is shared with the buyer of that delivery (and with us) so the delivery can be followed on a map. Drivers consent to this when they accept a tracked delivery; tracking ends when the delivery completes.

Public content shows general location only. Posted jobs, requests, and estimates display city/state — never your street address, which is shared only with the provider you transact with.

We use cookies and similar technologies to enhance your experience and analyze usage patterns. You can control cookie preferences through your browser settings. Specifically:

We do not use third-party advertising trackers on the Platform, and we do not sell or share your personal information for cross-context behavioral advertising.

To build our directory of tree-service, firewood, and related businesses, we collect PUBLICLY AVAILABLE business information — business name, address, phone number, website, publicly listed business email addresses, and ratings — from public sources such as public map listings and the businesses' own websites. We use this information to:

This is business contact information, not consumer data. If your business appears in our directory and you want it removed, use the removal link on your claim page or email privacy@timber.bid — we remove entries promptly and suppress them from future collection. We do not send marketing email to consumers without consent.

Transactional messages (order confirmations, bid alerts on your own jobs, delivery updates, security emails) are part of the service. Marketing email is sent only with consent or as permitted business outreach (Section 10A), always with unsubscribe. If you opt in to text messages (for example, by verifying your phone number or turning on text alerts), we send transactional texts about your own activity as described in Section 8E of our Terms. Message and data rates may apply, frequency varies with your activity, reply STOP to opt out and HELP for help. SMS consent is never a condition of purchase. We keep a record of your consent, including the wording you were shown and when you agreed or opted out.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third party, except the messaging providers that deliver our texts on our behalf (such as Twilio and the wireless carriers).

We rely on these processors to run the Platform: Supabase (database and authentication), Stripe (payments), Netlify (web hosting), Resend (email delivery), Anthropic and OpenRouter (AI features; OpenRouter routes AI requests to the model provider), Google (analytics, maps data, and Sign in with Google), Apple (Sign in with Apple), Mapbox (maps), Sentry (error reporting), Expo (mobile app services and push notifications), and Twilio (text messaging). Each receives only the data needed for its function.

Our Platform is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it promptly.

California residents have rights under the CCPA, as amended by the CPRA, including the right to know what personal information we collect and why, to access and correct it, to request deletion, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell or share personal information for that purpose, and we do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for exercising these rights. You may use an authorized agent, and we may need to verify your identity before acting on a request.

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others as they take effect) may have the right to confirm whether we process their personal data and to access, correct, delete, and obtain a portable copy of it, and to opt out of targeted advertising, sale, and profiling that produces legal or similarly significant effects. We do not sell personal data or use it for targeted advertising.

To make a request, email privacy@timber.bid. If we decline your request, you may appeal by replying with the subject line "Privacy Appeal"; we will respond within the time the law requires, and if you are not satisfied you may contact your state attorney general.

Timber.Bid is based in the United States and processes information in the United States and in other countries where our service providers operate. If you use the Platform from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where the law requires it, we rely on recognized transfer mechanisms, such as standard contractual clauses, for these transfers.

If the EU or UK General Data Protection Regulation applies to you, we process your information: to perform our contract with you (running your account, orders, jobs, and payments); for our legitimate interests (securing the Platform, preventing fraud, improving our services, and business-to-business outreach, which you may object to at any time); to comply with legal obligations; and with your consent where we ask for it (such as text messages or marketing email), which you may withdraw at any time. You have the rights described in Section 8, plus the right to restrict processing and to lodge a complaint with your local data-protection authority.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or Platform notification. Your continued use after changes indicates acceptance of the updated policy.

For privacy-related questions or to exercise your rights: