Privacy Policy
We respect your privacy and safeguard your business data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Information Technology Act, 2000.
Last Updated: August 2026
Zero Original Document Retention Guarantee
When you upload tender documents (PDFs) for analysis, they are processed in volatile memory in real time. We do NOT store or retain original tender files on our servers. Only structured extracted analysis outputs (e.g. compliance checklists, risk matrices) are saved in your private account workspace database.
1. Scope and Applicability
This Privacy Policy applies to all users of TenderFlow Pro (tenderflowpro.in). It governs the collection, processing, protection, and erasure of personal and commercial data provided when using our website, AI bidding tools, and digital toolkits.
2. Information We Collect
- Account Identification Data: Name, business email address, and authentication provider details (Email/Password or Google OAuth).
- Procurement Profile Data (Optional): Company name, GSTIN, PAN, Udyam registration number, and bidding experience provided to customize compliance checks.
- Billing & Payment Metadata: Razorpay payment transaction IDs, order IDs, and timestamps. We do NOT collect or store sensitive financial data like debit/credit card numbers or UPI PINs.
- Extracted Audit Results: Structured AI audit verdicts and checklists generated from your scans for your personal dashboard archive.
3. Purpose and Legal Grounds for Data Processing
We process your data strictly on the basis of user consent and contractual necessity to:
- Execute automated document analysis and generate compliance reports requested by you.
- Provision purchased digital toolkit downloads and manage your AI credit balance.
- Authenticate your account session and prevent unauthorized access.
- Comply with applicable Indian tax and electronic commerce accounting laws.
4. Zero Data Selling & Third-Party Processors
We do NOT sell, lease, rent, or trade your personal or business data to any third party. We share data exclusively with authorized infrastructure service providers strictly required to operate the service:
- Razorpay: Payment processing under strict PCI-DSS and RBI data localization standards.
- Supabase: Encrypted database storage with row-level access security.
5. Data Principal Rights Under DPDPA 2023 (Right to Erasure)
In compliance with Section 11 and Section 12 of the Digital Personal Data Protection Act, 2023, you enjoy the following enforceable rights:
- Right to Access & Correction: You can view and edit your profile parameters anytime in your Account Profile.
- Right to Complete Erasure / Account Deletion: You can permanently delete your account and all associated database records (extracted reports, purchases, credits, logs) directly via the "Delete My Account" feature in your Profile Settings, or by writing to our Grievance Officer.
- Right to Withdraw Consent: You may discontinue service use and erase your workspace at any time.
6. Security & 256-Bit SSL Encryption
All communications are encrypted using modern TLS/HTTPS (256-bit encryption). Database access is protected with strict Row-Level Security (RLS) policies ensuring that only authenticated workspace owners can access their extracted dossiers.
7. Grievance Redressal & Physical Contact Address
If you have questions, feedback, or wish to exercise data rights under DPDPA 2023, contact our designated Grievance Officer:
Grievance Redressal Officer: Mohammad Hamza
Co-Founder: MD Nadim
Official Email: nadimhamza41@gmail.com
Helpline Phone: +91 9852062833
Physical Office Address: Near Gyarahwi Masjid, Sarsaiyad Chowk, Shukul Toli, Siwan, Bihar — 841226, India