Privacy Policy

1. Information We Collect

Account and profile information: name, email address, organization name and type, country, sectors of interest, geographic focus, team size, and preferred buyer/funder types — provided when you sign up and complete onboarding.

Billing information: your subscription plan and status. Card and payment details are collected and processed directly by our payment processors (Paystack and Stripe) — we never see or store your full card number.

Content you provide: documents you upload to your Document Library, tender/grant search inputs (including a company website URL and free-text descriptions you submit to Advanced Search), messages sent through our Contact form, and any content submitted for AI-assisted extraction or matching.

Usage data: pages visited, features used, and AI request metadata (task type, provider used, token counts, and cost) logged for reliability, rate-limiting, and cost-monitoring purposes.

Technical data: IP address, browser type, and device information collected automatically by our hosting and infrastructure providers as part of standard web server logging.

2. How We Use Your Information

• To create and maintain your account, and to authenticate you when you log in.
• To match you with tenders and grants using your organization profile and, where you use Advanced Search, an AI-generated profile derived from your submitted description and answers.
• To process subscription payments and manage billing, renewals, and cancellations.
• To send transactional communications: deadline alerts, account notifications, and responses to support requests.
• To operate, secure, and improve the platform, including diagnosing technical issues and monitoring for abuse.
• To comply with legal obligations, such as tax and accounting record-keeping.

3. Legal Basis for Processing (EEA/UK Visitors)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process your personal data on the following legal bases: performance of a contract (providing the service you signed up for), legitimate interests (improving and securing the platform, preventing fraud), consent (where you've given it, e.g. optional marketing communications), and legal obligation (tax, accounting, and regulatory compliance).

4. AI Processing of Your Data

TenderBridge uses AI models from OpenAI and Anthropic to power tender/grant matching, document extraction, compliance review, and the business assistant chat feature. When you use these features, relevant text you provide (or that we extract from a document or URL) is sent to these providers for processing. Neither provider uses your data to train their general-purpose models under our current agreements with them. See our AI Usage Disclosure for a full explanation of what AI does on this platform and its limitations.

5. How We Share Your Information

We do not sell your personal data. We share it only with the following categories of recipients, each acting as a data processor under contract with us:

• Supabase — database hosting, authentication, and file storage for the platform.
• OpenAI and Anthropic — AI processing for matching, extraction, and chat features (see Section 4).
• Paystack and Stripe — payment processing for subscription billing.
• Resend — transactional email delivery (e.g. deadline alerts).
• Vercel — hosting and content delivery for the web application.

6. International Data Transfers

Our service providers operate infrastructure in multiple countries, including the United States and the European Union. Where personal data is transferred outside the country in which you're located, we rely on the transfer mechanisms our processors provide (such as Standard Contractual Clauses for transfers from the EEA/UK) to ensure your data remains protected.

7. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete or anonymize personal data within a reasonable period, except where we're required to retain it for legal, tax, or accounting purposes, or to resolve disputes. AI usage logs are retained for cost-tracking and reliability purposes and do not include the full content of your requests beyond what's needed for that purpose.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection and restriction — object to or ask us to limit certain processing, including processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

8a. California Residents (CCPA/CPRA)

If you're a California resident, you have the right to know what personal information we collect and how it's used, the right to delete your personal information (subject to exceptions), the right to correct inaccurate information, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights.

8b. Nigerian Users (NDPA)

If you're located in Nigeria, you have rights under the Nigeria Data Protection Act 2023, including the right to access, correct, and request deletion of your personal data, and to object to processing in certain circumstances. To exercise any of the rights described in this section, contact us using the details in Section 12.

9. Cookies and Similar Technologies

TenderBridge uses Google Analytics, Google Ads conversion tracking, and the Meta Pixel to understand site usage and measure advertising performance. Your session itself is kept signed in using your browser's local storage, not a cookie. See our Cookie Policy for full details, including cookies that may be set by third-party payment pages during checkout.

10. Children's Privacy

TenderBridge is intended for business and organizational use and is not directed at, or knowingly used by, individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Data Security

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), role-based access controls, and row-level security on our database, to protect your data from unauthorized access, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at admin@growthinvest.org. We aim to respond to all legitimate requests within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you directly. Continued use of TenderBridge after changes take effect constitutes acceptance of the revised policy.