GDPR policy
Last updated: July 15, 2026
TenderCraft keeps three pieces of personal data to run your account: your first name, last name, and email address. We also keep analytics about how the platform is used, with your consent. We never sell your data, we store it in the European Union, and you can unsubscribe from promotional emails or request deletion at any time by writing to contact@tendercraft.ai.
Who controls your data
TenderCraft is the data controller for the personal data described here. We operate from Romania and process data under EU Regulation 2016/679, known as GDPR.
This policy covers www.tendercraft.ai and app.tendercraft.ai. It works together with our terms and conditions.
📬 One address for everything
For any request about your data, including unsubscribing from promotional emails, write to contact@tendercraft.ai.
What we collect
We collect the minimum we need. For your account that is three fields.
Account data
First name, last name, email address. Optionally your company and role. Used to create your profile, log you in, and send tender alerts.
Analytics
Pages visited, features used, session duration, referral source, country, browser, device type. Collected with your consent.
Billing data
Company name, fiscal code, address, invoice history. Card details go straight to our payment processor. We never see or store your card.
Documents you upload
Tender files and company data you send for analysis. Private to your account and never shared with other clients.
We also process public procurement data from official sources such as SEAP and TED. That data is published by public authorities and covers tenders, contracts, and companies. It is public by law and we did not collect it from you.
✅ What we do not collect
No special category data. No health, political, religious, biometric, or trade union data. Do not upload it.
Why we process it and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| First name, last name, email | Create and run your account, send tender alerts and service emails | Contract (art. 6(1)(b)) |
| Email, first name | Send promotional emails about features, offers, and educational content | Consent (art. 6(1)(a)) |
| Analytics data | Measure and improve the product, fix problems, decide what to build | Consent (art. 6(1)(a)) |
| Billing data | Issue invoices and meet accounting duties | Legal obligation (art. 6(1)(c)) |
| Uploaded documents | Run the AI analysis you asked for | Contract (art. 6(1)(b)) |
| Security logs | Prevent fraud and abuse, keep the platform safe | Legitimate interest (art. 6(1)(f)) |
Where the basis is consent, you can withdraw it at any time. Withdrawal does not affect processing that happened before.
Promotional emails and how to stop them
We send promotional emails only if you opted in, at registration or later from your account settings. Consent is free, specific, and never a condition for using TenderCraft.
- What we send: New features and product updates, offers and discounts, guides, webinars, market reports, event invitations, and surveys.
- How often: A few times per month at most. We do not sell or rent your email address to anyone.
📧 Unsubscribe
Click the unsubscribe link in any promotional email, or send one line to contact@tendercraft.ai. We action it within 72 hours, free of charge, with no questions asked.
Unsubscribing stops marketing only. Service emails continue because we need them to run your account: tender alerts you set up, password resets, invoices, security notices, and changes to these policies. Close your account to stop those too.
Analytics and cookies
We keep analytics data about how people use the site and the platform. It tells us which pages people read, which features they use, and where the product is slow or confusing.
- Essential cookies: Keep you logged in and secure. These run without consent because the service cannot work without them.
- Analytics cookies: Measure usage. These run only after you accept them in the cookie banner. Refusing them does not limit any feature.
- Aggregation: We read analytics as trends across all users, not to profile you individually. We do not use it to make automated decisions about you.
You can change or withdraw your cookie choice at any time from the cookie settings, or by writing to contact@tendercraft.ai.
How long we keep it
| Data | Retention |
|---|---|
| First name, last name, email | While your account is active, then 30 days |
| Uploaded documents | While your account is active, then 30 days |
| Marketing consent record | 3 years after you unsubscribe, as proof of consent |
| Analytics data | 26 months, then deleted or fully anonymised |
| Invoices and billing data | 10 years, required by Romanian accounting law |
| Security logs | 12 months |
The 30 day window after you close an account is a grace period. It lets you recover data if you closed by mistake. After it passes, deletion is permanent.
How we protect it
🔒 Your documents stay private
Documents you upload are private to your account. We never share them with other clients.
- Encryption in transit and at rest.
- Servers inside the European Union.
- Access limited to staff who need it, under confidentiality obligations.
- Regular backups and monitoring.
- If a breach puts your rights at high risk, we notify you and the authority within 72 hours.
Your rights
GDPR gives you the following rights over your personal data. All of them are free to exercise.
Access
Ask for a copy of the personal data we hold about you.
Rectification
Correct your name, email, or any inaccurate data.
Erasure
Ask us to delete your data, except what we must keep by law.
Portability
Receive your data in a structured, machine readable format.
Restriction
Ask us to pause processing while we check a dispute.
Objection
Object to processing based on legitimate interest, and to direct marketing at any time.
Withdraw consent
Withdraw consent for promotional emails or analytics whenever you want.
Complain
Lodge a complaint with a supervisory authority.
To exercise any of these, write to contact@tendercraft.ai. We answer within 30 days. We may ask you to confirm your identity first, so that nobody else can request your data.
If you are not happy with our answer, you can complain to the Romanian supervisory authority, ANSPDCP, at dataprotection.ro, or to the authority in your country of residence.
Children and changes to this policy
TenderCraft is a business tool. It is not for anyone under 18. We do not knowingly collect data from children. If you believe a child gave us data, write to us and we delete it.
We update this policy when our processing changes. For significant changes we email you 30 days in advance. The date at the top of this page shows the current version.
Frequently asked questions
What personal data does TenderCraft store about me?
Your first name, last name, and email address for your account. Optionally your company and role. We also keep billing data, documents you upload, and analytics about how you use the platform.
How do I unsubscribe from TenderCraft emails?
Use the unsubscribe link in any promotional email, or write to contact@tendercraft.ai. We action it within 72 hours, free of charge.
Does TenderCraft sell my personal data?
No. We never sell or rent your personal data. We share it only with processors that run the service for us, each bound by a GDPR contract.
What analytics does TenderCraft collect?
Pages visited, features used, session duration, referral source, country, browser, and device type. Analytics cookies run only with your consent, and we keep the data for 26 months.
Where does TenderCraft store my data?
On servers inside the European Union, encrypted in transit and at rest. Any transfer outside the EU relies on an adequacy decision or Standard Contractual Clauses.
How do I delete my TenderCraft account and data?
Close your account from settings, or write to contact@tendercraft.ai. We delete your personal data 30 days later, except invoices, which accounting law requires us to keep for 10 years.
Are the documents I upload to TenderCraft private?
Yes. Documents are private to your account and we never share them with other clients.
How do I request a copy of my data from TenderCraft?
Write to contact@tendercraft.ai. We answer access requests within 30 days and it is free.
Exercise your rights
For access, deletion, unsubscribing, or any question about your personal data, write to:
contact@tendercraft.ai