Privacy Notice

1. Who we are

TenderIQ is operated by TenderIQ, trading as TenderIQ, based in Ireland. TenderIQ is the data controller for personal data processed through the Service. Contact: info@tenderiq.ie.

2. Personal data we collect

• Account data: name, email, hashed password / OAuth identifier.
• Organisation data: workspace name, role, invited team members.
• Content you submit: tender documents, briefs, evaluations, comments.
• Usage & telemetry: pages viewed, features used, evaluations run.
• Device data: IP address, browser, operating system, timestamps.
• Support data: messages and attachments you send us.
• Billing data: collected and stored by Paddle (see §5); we receive only limited fields such as customer ID, subscription status, and country.

3. Purposes & legal bases

• Provide the Service and your account — performance of contract.
• Process AI evaluations of your uploaded documents — performance of contract.
• Bill you and manage subscriptions (via Paddle) — performance of contract and legal obligation (tax, accounting).
• Secure the Service, prevent fraud and abuse — legitimate interests.
• Improve the product and diagnose issues — legitimate interests.
• Send transactional email (invites, receipts, service notices) — performance of contract.
• Send marketing email, where offered — consent, withdrawable at any time.

4. AI processing

Documents you upload are processed by our AI pipeline (including third-party model providers acting as processors) to generate evaluations and coaching. We do not permit those providers to use your content to train their public models. Only extracted text is sent to the models — never raw payment data.

5. Sharing & subprocessors

We share personal data with the following categories of recipient:

• Merchant of Record: Paddle.com Market Ltd — handles the sale, payments, tax, invoicing, and subscription management. See Paddle's Privacy Policy.
• Hosting & database: Cloudflare (edge/CDN) and Supabase (database, auth, storage), operating on our behalf.
• Document extraction: Azure AI Document Intelligence (Microsoft), for text extraction.
• AI model providers: Anthropic and other model vendors, acting as processors under contract.
• Transactional email: our email delivery provider, to send service notices and invites.
• Professional advisers: lawyers, accountants, insurers where necessary.
• Authorities: where required by law, court order, or to protect rights and safety.

6. International transfers

Some of our subprocessors are located outside the EEA/UK (for example the United States). Where personal data is transferred outside the EEA/UK we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Retention

We retain personal data only as long as needed for the purposes above. Account and content data are kept while your account is active and for a reasonable period after closure to resolve disputes and meet legal obligations, then deleted or anonymised. Billing records are retained by Paddle and by us for the period required by tax and accounting law (typically 6–10 years).

8. Your rights (GDPR)

You have the right to:

• access the personal data we hold about you;
• ask us to rectify inaccurate data;
• ask us to erase your data;
• restrict or object to processing;
• data portability;
• withdraw consent at any time (without affecting prior lawful processing);
• lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

Exercise any right by emailing info@tenderiq.ie. We aim to respond within one month.

9. Security

We apply appropriate technical and organisational measures including TLS in transit, encryption at rest, access controls, row-level security in the database, and audit logs. No system is perfectly secure — please use a strong, unique password and keep credentials confidential.

10. Cookies

We use strictly necessary cookies to keep you signed in and to remember preferences. We may use privacy-respecting analytics cookies to understand aggregate usage. You can control cookies via your browser settings.

11. Changes

We may update this notice; the "last updated" date reflects the current version. Material changes will be notified in-app or by email.

12. Contact

Privacy queries: info@tenderiq.ie.