Privacy Policy

“Personal Data” means any data about an individual who is identifiable by or in relation to such data. “Processing” means any operation performed on Personal Data. “Data Principal” means the individual to whom the Personal Data relates. Capitalised terms not defined here have the meaning given in our Terms of Service.

• Identity and contact data — your name and email address provided at registration, or your name, email address and profile image where you sign in through a third-party identity provider (e.g. Google).
• Account and usage data — tenders you save, ratings and questions you submit, your subscription plan, and activity associated with your account.
• Technical data — device, browser, IP address, and similar diagnostic information collected automatically to operate and secure the Platform.
• Transaction data — records of subscriptions and payments. Payment-instrument details (such as card or bank information) are collected and processed solely by our payment processor and are not stored by us.

We Process Personal Data on the basis of your consent and for the following lawful purposes:

• to create, operate, authenticate and secure your account;
• to provide the Platform's features, including tender discovery, eligibility information, estimates and notifications;
• to process subscriptions, payments, invoices and taxes, and to prevent fraud;
• to respond to your queries, tickets and grievances;
• to improve, analyse and develop the Platform; and
• to comply with applicable law and enforce our Terms of Service.

Where Processing is based on your consent, you may withdraw that consent at any time by writing to the Grievance Officer named below. Withdrawal will not affect the lawfulness of Processing carried out before withdrawal. Some features may be unavailable if you decline or withdraw consent necessary to provide them.

We use strictly necessary cookies and your browser's local storage to keep you signed in and to remember your preferences. We do not use third-party advertising or cross-site tracking cookies. You may control or delete storage through your browser settings, though doing so may affect functionality.

We do not sell your Personal Data. We disclose Personal Data only as follows:

• to data processors and service providers who Process data on our behalf and under contract — including our cloud and database provider (Supabase), our payment gateway provider and our email service provider;
• to courts, regulators or governmental authorities where required by law, legal process or to protect rights, safety and property; and
• to a successor entity in connection with a merger, acquisition or reorganisation, subject to this Policy.

We retain Personal Data for as long as your account is active or as necessary to provide the Platform, and thereafter only as required to comply with our legal obligations, resolve disputes and enforce our agreements. Upon valid request, we will erase Personal Data that we are not required by law to retain.

We implement reasonable security practices and procedures designed to protect Personal Data from unauthorised access, alteration, disclosure or destruction, commensurate with the nature of the data and the risks involved. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you have the right to:

• access and obtain a summary of the Personal Data we Process about you;
• request correction, completion or updating of inaccurate or incomplete data;
• request erasure of your Personal Data;
• withdraw consent and grievance redressal; and
• nominate another individual to exercise your rights in the event of death or incapacity.

To exercise these rights, contact the Grievance Officer below.

The Platform is intended for businesses and persons who are at least 18 years of age and competent to contract. We do not knowingly Process the Personal Data of children. If you believe a child has provided us data, please contact us so we may take appropriate action.

The Platform links to external government e-procurement portals and other websites. We are not responsible for the privacy practices or content of such third parties, and your use of those sites is governed by their own policies.

We may amend this Policy from time to time. The revised version will be posted on this page with an updated effective date, and material changes will be notified by reasonable means. Your continued use of the Platform after such changes constitutes acceptance of the revised Policy.

In accordance with the Information Technology Act, 2000 and the rules thereunder, and the Digital Personal Data Protection Act, 2023, grievances regarding the Processing of your Personal Data may be addressed to our Grievance Officer:

• Designation: Grievance Officer, Bidrove
• Email: support@bidrove.com
• Address: Thane, Maharashtra, India

We will acknowledge and endeavour to resolve grievances within the timelines prescribed under applicable law.