Privacy policy

1. Data we collect

• Account data: name, work email, organization name and role.
• Company data: legal identity, turnover, certifications, projects, service locations and matching preferences.
• Evidence and bid data: documents you upload, extracted tender requirements, workspace notes and generated packages.
• Usage data: pages visited, actions taken and basic device information needed to secure the service.
• Billing data: plan, subscription status and payment identifiers. Card and UPI details are handled by our payment provider, not stored by Bidder.

2. Why we use it

To create and secure your account, match tenders to your company, extract cited requirements, prepare your packages, send transactional email, provide support, enforce plan limits and meet legal obligations. We do not sell personal data or use it for third-party advertising.

3. Legal bases

We rely on performance of our contract with you, your consent where required (for example, optional product emails), our legitimate interest in securing and improving the service, and compliance with applicable law.

4. Sharing

We share data with processors that host the service: Supabase (authentication, database and private storage), our application hosting provider, our transactional email provider and, once billing is enabled, Razorpay. We may disclose data if required by law or to protect the service. Processors are bound by contractual confidentiality and security obligations.

5. Storage, security and retention

Data is stored in a managed Postgres database with row-level isolation and private object storage. Access is role-based. We retain account and bid data while your organization is active and for a limited period after closure for backups, dispute resolution and legal compliance. Uploaded documents can be deleted on request.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or a portable copy of your personal data, and withdraw consent for optional communications. Organization owners can manage most company data directly in the product. Send requests to contact@bidharbor.online.

7. Cookies

Bidder uses essential cookies for authentication and session security. We do not use advertising cookies or third-party analytics that profile you across sites.

8. Children

The service is intended for business use by people aged 18 and over.

9. Changes and contact

We may update this policy and will post the new date on this page. For privacy questions or grievances, contact contact@bidharbor.online.