Legal

Privacy Policy

Last updated: 1 January 2025

1. Who we are

TenderIQ Ltd is registered in England and Wales. We are the data controller for personal data collected through our platform.

Contact: privacy@tenderiq.co.uk

2. What data we collect

Account data: name, email address, phone number, company name, and company number.

Payment data: transaction records. Your card details are processed by Stripe and never stored by TenderIQ.

Document data: the tender documents you upload. These are stored encrypted in AWS S3 in the UK (eu-west-2 region).

Usage data: log data, IP addresses, and browser information collected automatically when you use our platform.

3. How we use your data

  • To provide the tender review service you have purchased
  • To process payments and issue VAT invoices
  • To send transactional emails about your submission status
  • To improve our service quality (documents are used only in aggregate, anonymised form)
  • To comply with legal obligations

We do not sell your personal data to third parties.

4. Document storage and retention

All uploaded documents are encrypted at rest using AES-256 and stored in AWS S3 in the UK (eu-west-2).

Documents are automatically deleted 90 days after your submission is completed. Anonymised metadata may be retained for service improvement purposes.

Delivered review packages are available for download for 7 days after approval. We recommend you save your package promptly.

5. Third parties

We use the following third-party processors:

  • Stripe — payment processing (UK/EU data)
  • AWS — document storage (UK, eu-west-2)
  • Resend — transactional email
  • Anthropic — document processing (document content is sent to Anthropic's API; Anthropic's API terms prohibit use of API data for model training by default)
  • Vercel — hosting (EU region)

6. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Port your data to another service

To exercise any of these rights, email privacy@tenderiq.co.uk. We will respond within 30 days.

7. Cookies

We use an authentication cookie (httpOnly, SameSite=Strict) to maintain your session. This cookie is essential for the service and cannot be disabled while logged in. We do not use third-party tracking cookies or advertising cookies.

8. Changes

We will notify registered users by email of material changes to this policy.

Privacy questions: privacy@tenderiq.co.uk · You also have the right to complain to the ICO.