Privacy policy
What data we collect, why we collect it, and what you can do about it.
Who controls your data
Tenders AI is operated by Xerovi OÜ (Tööstuse tn 75-71, Põhja-Tallinna linnaosa, 10416 Tallinn, Harju maakond, Estonia), the data controller for the personal data described below.
What we collect
- Account data: email address, authentication events, subscription plan.
- Company profile: the business description you provide, mapped CPV codes, selected operating countries.
- Usage data: which tenders you save, which AI analyses you run, basic analytics on page views (aggregated, no fingerprinting).
- Geolocation: coarse country-level location from your IP on first visit, used to default your country filter. Discarded immediately after.
What we never do
- Sell your data to third parties.
- Use your company description to train any public AI model.
- Share your saved tenders or bid strategy with anyone.
Who we share with
Our sub-processors: Supabase (EU region, authentication and database), Vercel (hosting), Resend (transactional email), Stripe (billing), Google Gemini API (AI inference — prompt content is not retained for training per Google's enterprise terms), Upstash (Redis cache), ipinfo.io (geolocation lookup).
Your rights
Under the GDPR you can request access, correction, deletion, portability, and restriction of processing of your personal data. Email info@xerovi.com and we respond within 30 days.
Cookies
We set a single session cookie for authentication. We do not run third-party advertising or analytics cookies.