Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: Name, email address, password, job title, and organization when you register
• Profile information: Professional information you choose to add to your profile
• Usage data: How you interact with our platform, searches performed, tenders viewed
• Communications: Messages you send us and responses to our surveys

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your registration and manage your account
• Send you tender alerts and notifications you have subscribed to
• Send transactional emails (account confirmation, password reset)
• Analyze usage patterns to improve the platform
• Respond to your comments, questions, and requests

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers: Third-party companies that help us deliver our services (hosting, email delivery via Resend, analytics)
• Legal requirements: When required by law or to protect our rights and the rights of our users

4. Data Retention

We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at [email protected]. We will delete your personal data within 30 days of receiving a valid deletion request.

5. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your password is stored using industry-standard hashing (Argon2id via Supabase Auth). All data transmission is encrypted using TLS 1.2+.

6. Cookies

We use essential cookies to maintain your session and authentication state. These cookies are necessary for the platform to function and cannot be disabled. We do not use advertising or tracking cookies.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your personal data

To exercise any of these rights, please contact us at [email protected].

8. International Data Transfers

Your data is stored on servers located in the European Union (Hetzner, Germany). If you access Bidanga from outside the EU, your data may be transferred to and processed in the EU. By using our service, you consent to this transfer.

9. Children's Privacy

Bidanga is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or by posting a prominent notice on our platform.

11. Contact

For any privacy-related questions or requests, contact our Data Protection Officer at [email protected].