Skip to content

Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect the following types of information:

  • Account Information: Email address, hashed password
  • Company Profile: Company name, registration number, PAN, turnover, experience, domain, certifications, and other profile fields you provide
  • Tender Documents: PDF files you upload or text you paste for analysis
  • Usage Data: Analysis history, timestamps, feature usage
  • Contact Data: Messages you send via the contact form

2. How We Use Your Information

  • To provide and improve the AI tender analysis service
  • To generate personalised eligibility assessments and recommendations
  • To communicate with you about your account and analyses
  • To improve our product and user experience
  • To comply with legal obligations

3. Data Storage and Security

  • Data is stored on Supabase (AWS-hosted PostgreSQL) with encryption at rest and in transit
  • Passwords are hashed using bcrypt — we never store plain text passwords
  • We use HTTPS for all data transmission
  • Session cookies are set with HttpOnly, Secure (in production), and SameSite=Lax flags
  • We implement CSRF protection on all forms

4. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with:

  • AI Providers: Groq and/or Google Gemini — to process tender analysis. These providers process data under their own privacy policies and do not use your data for training.
  • Infrastructure Providers: Supabase (database), Render (hosting) — as necessary to operate the service
  • Legal Requirements: If required by Indian law or court order

5. Data Retention

We retain your account data for as long as your account is active. Tender documents and analysis reports are stored until you delete them or close your account. You may request deletion of your data at any time.

6. Your Rights

Under applicable Indian data protection laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent for data processing

7. Cookies

We use essential session cookies for authentication. We may use Google Analytics and Microsoft Clarity for anonymous usage analytics. No advertising cookies are used. A cookie consent mechanism will be added before production launch.

8. Children's Privacy

TenderAI is not intended for use by persons under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email.

10. Contact

For privacy-related questions or data deletion requests, contact us at support@tenderai.in.