Understand what
you are sharing.

Sweepdraft is an early business-software pilot. These are the controls in the current application, and the boundaries to understand before using it with real client information.

Your account

Sign-in links expire after 15 minutes and work once. Confirming the link creates a session in an HTTP-only, secure cookie. Sessions last up to seven days and can be ended with Sign out. Sign-in requests are rate limited. Keep access to your email account protected.

Your private bid

Private bid operations require an authenticated account and an ownership check. Database row policies also restrict bid, share and response queries to the account or authorized proposal context. The application uses a restricted database role and encrypted database connections; it does not expose that credential to your browser.

This is not a claim of an independent security audit or certification. The pilot does not currently include enterprise SSO, team roles or a contractual uptime SLA.

The client copy

Publishing makes a separate snapshot containing the client, site, your public business details, service scope, frequency and quoted price. Internal cost inputs and private notes are excluded. Subsequent edits to your working bid do not alter that published version.

Client responses

The link permits a client to express interest or request changes. A supplied name is not independently verified. These responses do not sign a contract or authorize a payment.

Export and deletion

The private JSON export contains internal costs and notes. Keep it for your own records; use the client preview or printed PDF for your customer. Deleting a bid removes its published copies and responses. Contact us from your account email for account export or deletion.

Service providers

Supabase stores application data, Vercel hosts the application and Resend delivers email. We do not send bid contents to an AI provider or install advertising trackers. Read our privacy notice for retention and provider information.

Report a problem

Email studio@sidestream.be with a description and the affected feature. Do not include passwords, sign-in links, private proposal links or confidential client data. We can agree a secure way to share further evidence if needed.

Last reviewed November 4, 2026. We assess reported issues before making any assurance about their impact.