Privacy Policy

1. Scope and Applicability

This Privacy Policy applies to all users and visitors of TenderFlow Pro (tenderflowpro.in). It governs the collection, handling, processing, and erasure of personal and commercial data provided when using our website, AI bidding tools, and digital toolkits.

2. Information We Collect

• Account Identification Data: Name, business email address, and authentication credentials (via Email/Password or secure Google OAuth).
• Procurement Profile Data (Optional): Company name, GSTIN, PAN, and Udyam registration number provided voluntarily to customize compliance matrices.
• Billing & Payment Metadata: Payment transaction reference IDs, order IDs, payment timestamps, and amount paid. We do NOT collect, store, or have access to card numbers, CVVs, expiration dates, or bank account credentials.
• Extracted Audit Summaries: Structured AI audit verdicts and checklists generated from your scans for your personal dashboard archive.

3. Payment Card Processing & Zero Sensitive Card Storage

All online payments on TenderFlow Pro are processed through Razorpay, an RBI-regulated payment aggregator compliant with the highest international security standards (PCI-DSS Level 1 certification).

4. Purpose and Legal Grounds for Data Processing

We process your data strictly on the basis of user consent and contractual necessity to:

• Execute automated document parsing and generate compliance reports requested by you.
• Provision purchased digital toolkit downloads and manage your AI credit balance.
• Authenticate your user session securely and prevent unauthorized account access.
• Comply with applicable Indian commercial accounting and taxation laws.

5. Zero Data Selling & Third-Party Processors

We do NOT sell, lease, rent, or trade your personal or business data to any third party or advertiser. Data is shared strictly with infrastructure service providers required to operate the platform:

• Razorpay: Payment processing under strict PCI-DSS and RBI data localization standards.
• Supabase: Encrypted cloud database storage with Row-Level Security (RLS) enforcement.

6. Data Principal Rights Under DPDPA 2023 (Right to Erasure)

In compliance with Section 11 and Section 12 of the Digital Personal Data Protection Act, 2023, you have the following enforceable rights:

• Right to Access & Correction: You can view and edit your profile parameters anytime in your Account Profile.
• Right to Complete Erasure / Account Deletion: You can permanently delete your account and all associated database records (extracted reports, purchases, credits, logs) directly via the "Delete My Account" button in your Profile Settings, or by writing to our Grievance Officer.
• Right to Withdraw Consent: You may discontinue service use and delete your workspace at any time.

7. Security & Encryption Standards

All communications between your browser and our servers are encrypted using modern TLS/HTTPS (256-bit encryption). Database access is protected with strict Row-Level Security (RLS) policies ensuring that only authenticated workspace owners can access their extracted dossiers.

8. Grievance Redressal & Contact Address

If you have questions, feedback, or wish to exercise data rights under DPDPA 2023, contact our designated Grievance Officer:

Brand / Entity: TenderFlow Pro (tenderflowpro.in)
Grievance Redressal Officer: Mohammad Hamza
Co-Founder: MD Nadim
Official Email: nadimhamza41@gmail.com
Helpline Phone: +91 9852062833
Physical Office Address: Near Gyarahwi Masjid, Sarsaiyad Chowk, Shukul Toli, Siwan, Bihar — 841226, India
Operating Hours: Monday to Saturday: 10:00 AM – 6:00 PM IST (Response TAT: 24–48 hours)