Effective: 30 April 2026

Privacy Policy

This page explains what information Tendabox collects, how we use it, and the choices you have. It applies to the Tendabox website (tendabox.app) and the Tendabox mobile application.

1. Who we are

Tendabox is a tender and procurement-opportunities platform operated by Tendabox by Nakala. Our offices are at:

2. Information we collect

2.1 Information you provide

• Account details: company name, email address, phone number, password (stored hashed).
• Business profile: lines of business, registration documents, contact persons, addresses.
• Tender activity: tenders viewed, saved, applied to, quotations submitted, and uploaded attachments.
• Communications: messages sent through the in-app chat or to info@tendabox.app.

2.2 Information collected automatically

• Device & usage: device model, operating system, app version, language, IP address, and pages viewed.
• Cookies & session tokens: used to keep you signed in and remember preferences.
• Diagnostics: crash logs and performance data to help us fix bugs.

2.3 Information from third parties

If you sign up via WhatsApp or a partner organisation, we may receive your name, phone number, and the partner reference. We use Google Gemini for optional AI tips — only the tender text you choose to analyse is shared with that service.

3. How we use your information

• To create and operate your Tendabox account.
• To match you with tenders and opportunities relevant to your lines of business.
• To send invitation, reminder, and notification messages by email or WhatsApp (you can opt out at any time).
• To process applications, quotations, purchase orders, and payments you submit through the platform.
• To prevent fraud, protect the platform, and comply with applicable law.
• To improve the product through aggregated, non-identifying analytics.

4. Lawful basis

We process personal data on the basis of (a) the contract you enter into when you create an account, (b) your consent for optional features such as marketing notifications, and (c) our legitimate interest in keeping the platform secure and improving it.

5. Sharing

We do not sell your personal information. We share it only with:

• Buyers / tender issuers when you submit an application or quotation to them.
• Service providers who run our infrastructure (hosting, email delivery, SMS/WhatsApp messaging, AI tips). They are contractually limited to the purposes we set.
• Authorities when required by law or to protect our rights and the safety of our users.

6. Storage and security

Tendabox data is hosted on managed servers in the European Union (Hetzner) and accessed over TLS. Files attached to applications are stored in encrypted object storage. Passwords are stored as bcrypt hashes. Access to production systems is limited to authorised personnel.

7. Retention

We keep account information for as long as your account is active. If you request deletion, we remove your personal data within 30 days, except where we are required to retain certain records (for example, tax invoices) for the period set by law. Aggregated, non-identifying data may be kept indefinitely.

8. Your rights

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and associated personal data — see tendabox.app/delete-account.
• Object to or restrict certain processing, including marketing messages.
• Receive a copy of your data in a portable format.

To exercise any of these rights, email info@tendabox.app. You may also lodge a complaint with the data protection authority in your jurisdiction.

9. Children

Tendabox is intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children.

10. Changes to this policy

If we make material changes, we will post the updated policy on this page and update the effective date above. Continued use of Tendabox after changes take effect means you accept the revised policy.

11. Contact us

If you have any questions about this policy or how we handle your information, contact us at info@tendabox.app.