Privacy Policy

Who is responsible

[Operator legal entity name], [registered address], is the controller of the personal data described here. Contact: [privacy contact email] [and Data Protection Officer, if appointed].

What we collect

• Account: your email address, and either a password (stored only as a secure hash by our authentication provider) or a sign-in with Google, which shares that email with us. Also your username and sign-up date.
• Profile: display name, picture and the description you write — shown on your public profile.
• Activity: the tenders and news you follow (visible only to you); your posts, comments and likes (visible to other people); and your chat messages.
• Billing: if you take a paid plan, Stripe processes the payment. We store a customer reference and your plan, not your card number.
• Scope context: files uploaded to a workspace’s scopes (such as presentations, references and team CVs, which can contain other people’s personal data). Upload only what you’re entitled to share.
• Technical: a session cookie that keeps you signed in, and cookies that remember your interface language and display mode (light, dark or automatic). We don’t use advertising or tracking cookies.

Why we use it

To provide your account and the platform’s features (performance of our contract with you), to keep the service secure, and to improve it (our legitimate interests). We don’t sell your data.

Who processes it for us

• Supabase — database, file storage and authentication (EU region: Ireland).
• Vercel — website hosting.
• Anthropic — AI models behind the agents; tender and company material is sent to them when an agent runs.
• Tavily — web search and page reading for the search agents (no account data).
• Stripe — subscription payments, when you choose a paid plan.
• Google — only if you choose to sign in with Google. It authenticates you and shares your email address.

[To be completed: transfers outside the EEA and the safeguards used, e.g. Standard Contractual Clauses.]

How long we keep it

For as long as your account exists. Deleting your account (Edit profile → Delete account) removes your profile, picture, follows, posts, comments and chat. [Backup retention period to be completed.]

Your rights

You can access, correct or delete your data, object to or restrict its use, and ask for a copy (portability) — most of it directly in Edit profile, or by writing to [privacy contact email]. You can also complain to your data protection authority.