Privacy policy

Last updated 2 August 2026. This policy explains how we handle information in line with the Protection of Personal Information Act (POPIA).

What we collect

Account information (name, email address, sign-in identity), workspace and client company details (registration number, tax and B-BBEE particulars), the tender documents, evidence files, past submissions and branding assets you upload, and usage records such as agent runs, credits consumed and payment events.

Why we process it

To operate your tender desk: extracting requirements, drafting responses, checking compliance, assembling export packs, monitoring evidence expiry, metering credits, billing and support. We also use aggregated, de-identified usage totals to monitor cost and performance of the platform.

AI processing

Tender text and the evidence excerpts needed for a task are sent to our AI provider to generate drafts. Content is processed to return your result and is not used to train shared models. Your past submissions are indexed for retrieval inside your workspace only and are never surfaced to another workspace.

Operators we use

Hosting and database, AI inference, and Paystack for payments. Card details are entered on Paystack's hosted checkout and never reach our systems. Each operator processes information only on our instruction and under confidentiality obligations.

Storage and security

Documents live in private storage buckets reachable only through short-lived signed links. Workspace data is separated by row-level security so users can only read their own workspace. Access is restricted to the platform owner for support and incident handling.

Retention

We keep workspace content while your account is active and for a short period afterwards so a workspace can be restored. On a deletion request we remove documents, drafts and indexes, retaining only the billing records we are legally required to keep.

Your rights

You may request access to, correction of, or deletion of your personal information, object to processing, or ask for an export of your workspace content. Contact us from the account you wish to act on and we will respond within a reasonable period.

Cross-border processing

Some operators process information outside South Africa. Where that happens, the operator is bound by contractual protections comparable to POPIA.

See also our terms of service.