Privacy policy
Last updated 2 August 2026. This policy explains how we handle information in line with the Protection of Personal Information Act (POPIA).
What we collect
Account information (name, email address, sign-in identity), workspace and client company details (registration number, tax and B-BBEE particulars), the tender documents, evidence files, past submissions and branding assets you upload, and usage records such as agent runs, credits consumed and payment events.
Why we process it
To operate your tender desk: extracting requirements, drafting responses, checking compliance, assembling export packs, monitoring evidence expiry, metering credits, billing and support. We also use aggregated, de-identified usage totals to monitor cost and performance of the platform.
AI processing
Tender text and the evidence excerpts needed for a task are sent to our AI provider to generate drafts. Content is processed to return your result and is not used to train shared models. Your past submissions are indexed for retrieval inside your workspace only and are never surfaced to another workspace.
Operators we use
Hosting and database, AI inference, and Paystack for payments. Card details are entered on Paystack's hosted checkout and never reach our systems. Each operator processes information only on our instruction and under confidentiality obligations.
Storage and security
Documents live in private storage buckets reachable only through short-lived signed links. Workspace data is separated by row-level security so users can only read their own workspace. Access is restricted to the platform owner for support and incident handling.
Retention
We keep workspace content while your account is active and for a short period afterwards so a workspace can be restored. On a deletion request we remove documents, drafts and indexes, retaining only the billing records we are legally required to keep.
Your rights
You may request access to, correction of, or deletion of your personal information, object to processing, or ask for an export of your workspace content. Contact us from the account you wish to act on and we will respond within a reasonable period.
Cross-border processing
Some operators process information outside South Africa. Where that happens, the operator is bound by contractual protections comparable to POPIA.
See also our terms of service.