TenderAtlas Privacy Policy

Version: 0.9-beta Effective date: 5 October 2026

This Policy explains how Urmonov Sanjarbek, an individual resident of the Republic of Uzbekistan and operator of the TenderAtlas brand, collects, uses, stores, protects and, when necessary, shares personal data in connection with TenderAtlas.

1. Data we may collect

• name, email, phone number, company, role and TIN, if entered;
• a secure password hash, never the plain-text password;
• tender-monitoring preferences;
• Telegram identifier and connection status;
• support communications;
• documents, links and instructions submitted for AI analysis;
• beta limits and AI credit status; payment data is not collected while beta payments are disabled;
• IP address, browser, device, timestamps, session and security logs;
• information supplied through Google Login and Telegram; no payment provider is connected during beta;
• tender and procurement information from public sources.

2. Purposes

We use data to create and secure accounts; provide personalised monitoring; deliver matching tenders through the web and Telegram; perform requested AI analysis; manage beta limits and AI credits; provide support; prevent fraud and abuse; diagnose and improve the Service; comply with law and resolve disputes; and, only with separate consent, send marketing communications.

3. Legal grounds

Processing may be based on consent, performance of a contract with the User, the Operator’s legal obligations, information security and other grounds permitted by applicable law. Consent-based processing may be withdrawn for the future.

4. AI processing

When an AI feature is used, the necessary portion of a document may be transferred to contracted technology providers OpenAI to perform the requested analysis. Transfers should be limited to the minimum necessary, and account identifiers should be separated from AI requests unless required.

The User must have a lawful basis to submit confidential or third-party data and should remove unnecessary identifiers where possible.

5. Recipients

Minimum necessary access may be provided to: production infrastructure in Frankfurt; the Ahost VPS in Uzbekistan solely as a restricted proxy; Resend, Google, Telegram and OpenAI within the service they provide; TenderAtlas internal analytics; competent authorities under a lawful request; and a lawful successor in a reorganisation. No payment provider is connected and payments are disabled during beta.

The Operator does not sell personal data for third parties’ independent advertising.

6. Storage location and international transfers

The primary personal-data database is currently located in Frankfurt, Germany. The Ahost VPS in Uzbekistan is used only as a restricted proxy for selected tender sources and does not store the user database. Moving user-linked data to a primary database in Uzbekistan is covered by a separate migration plan.

International transfers to technology providers take place only where a lawful ground, required consent and appropriate safeguards exist. The amount of data transferred is minimised.

7. Retention

• account and service data: for the active account period and 3 years afterwards, unless a longer period is required by law;
• security logs: 12 months;
• deleted-account backups: up to 90 days;
• financial and contractual records: for the period required by law.

When the purpose ends, data is deleted, anonymised or retained on a restricted basis where a lawful ground applies.

8. Cookies and analytics

Essential cookies support authentication, session, language and security. Analytics, advertising and retargeting cookies are not activated before the User’s choice where consent is required. Cookie choices may be changed at any time.

9. Security

The Operator uses access controls, password hashing, encrypted transport, backups, audit logging, role-based permissions and system updates. No system can guarantee absolute security, but incidents are handled under applicable law and internal procedures.

10. User rights

Subject to applicable law, the User may request information about processing; access and a copy; correction; restriction or cessation of unlawful processing; deletion where permitted; withdrawal of optional consent; marketing opt-out; and recourse to the competent authority.

Requests should be sent to privacy@tenderatlas.uz. Reasonable identity verification may be required to protect the account.

11. Children

TenderAtlas is intended for business users and is not designed for independent use by anyone under 18 years of age.

12. Changes and contact

Material changes will be communicated through the platform, email or Telegram, and renewed consent will be requested where necessary.

Privacy email: privacy@tenderatlas.uz Operator: Urmonov Sanjarbek Status: individual resident of the Republic of Uzbekistan Brand: TenderAtlas Phone: +998 93 506 18 03

---