Privacy policy

• Your email address, to send the confirmation link, your digests and account messages. This is the only personal detail we require.
• Your alert settings: the markets, keywords, excluded words, category, minimum value and the short description you may write. Used only to match tenders for you.
• Billing records, if you subscribe: the customer and subscription identifiers that Dodo Payments gives us, your subscription status and period dates, and the payment notifications Dodo sends us, which include the name and email on the payment and your billing country. We never see or store card numbers; payment details are entered on Dodo's pages.
• Support records: if you ask for a refund, your reason, your note and our decision; if support changes your plan (free Pro, extra days, a cancellation), a log of what changed, when, by whom and why.
• Usage events: page views and searches are counted without any account, IP address or browser fingerprint. Actions in your account (for example creating an alert, clicking a link in your digest, subscribing, or a refund request) are recorded against your account so we can support you and keep the service working.
• A hashed IP address, only to limit abuse of search, sign-up and sign-in (rate limiting). The hash is made with a secret key, cannot be turned back into an address, and is deleted after a few days.
• Your website address, if you ask us to draft an alert from it: we fetch that page and send its text to the AI model to suggest keywords (see AI processing).

We do not ask for names, phone numbers or company details (only the payment notifications above include a name), we run no advertising or tracking cookies, and we do not buy or sell data. Tender notices themselves are public-sector information republished from official portals with contact-person fields removed.

Four cookies, all strictly necessary and none used for tracking. bh_session keeps you signed in for 30 days after you click a sign-in link (HTTP-only). bh_ui holds no personal data, only whether this browser is signed in, so the page header can show the right buttons (30 days). bh_next remembers the page you were opening while you sign in, for up to an hour (HTTP-only). bh_sent_to holds the email address a sign-in link was just sent to, so the "check your email" page can show it and you can spot a typo (15 minutes, HTTP-only). Links in emails carry a signed token so you can manage or unsubscribe an alert without logging in.

For Pro subscribers, and for summaries shown on notice pages, we send the public text of tender notices together with an alert's keywords and description to an AI model to produce a plain-English summary and a fit score. At present the model is Google's Gemini, accessed through Google's API. Google may use content sent on its free API tier to improve its services, and people at Google may review it. The same model reads the text of your website page if you ask us to draft an alert from it. We never send your email address or billing details to any AI provider, and you can keep your alert description empty if you prefer to share only keywords.

• Google Cloud (United States, Iowa region) hosts the website and runs our scheduled jobs.
• Turso hosts our database (notices, accounts, alerts, events).
• Resend sends our emails; it processes your address and the email content.
• Dodo Payments is the merchant of record for subscriptions: it takes payment, issues invoices and handles tax. Its own privacy policy governs the payment details you give it.
• Google also provides the AI model behind summaries and fit scores (see above).
• Cloudflare provides DNS and forwards email sent to our support address.

Some of these companies are outside India, the UK and the EU (mainly in the United States). They act on our instructions under their standard data-processing terms.

• Unconfirmed sign-ups: deleted after 7 days if the confirmation link is never clicked.
• Accounts, alerts, delivery history and usage events: kept while your account exists, and deleted with it when you ask us to delete it.
• Billing and support records (payments, refunds, plan changes): kept for six years for tax and accounting, then deleted.
• Hashed IP addresses for rate limiting: a few days (at most four).
• Login-link tokens: 15 minutes, single use.
• Tender notices: removed 90 days after their deadline (or 180 days after publication if no deadline was given).

Wherever you are, you can ask us to show you, correct or delete the data we hold about you, or to export it, by emailing support@bidheron.com from the address on your account. We respond within 30 days. You can unsubscribe from any digest with the link in its footer, pause or edit alerts from your dashboard, and delete your account by asking us. If you are in the EU or UK, you also have the right to complain to your data-protection authority; in India, this address is also our grievance contact under the Digital Personal Data Protection Act.

We process your email and alerts to perform the service you asked for (contract), including sending alert keywords, descriptions and public notice text to the AI model for summaries and fit scores; rate-limiting and security data to protect the service (legitimate interest); and billing and support records to meet legal and accounting duties. Digests are part of the service you signed up for, not marketing; we send no marketing email.

BidHeron is a business tool for adults. We do not knowingly collect data from anyone under 18.

If we change this policy in a way that matters, we email account holders at least 14 days before it takes effect and update this page. Questions: support@bidheron.com.