Privacy Policy

This Privacy Policy explains what personal information TenderLog (provided by Blanca Gonzalez, trading as TenderLog, "we", "us") collects through the TenderLog app and website, how we use it, and your rights over it.

1. What We Collect

Account information

• Name and email address, when you or a teammate creates an account.
• Company name.

Data you enter into TenderLog

• Tender/job details: project names, reference numbers, dates, prices, and stages.
• Builder contact details you choose to record (name, email).
• Notes, feedback, and follow-up history you or your team add.

Billing information

Handled entirely by Stripe, our payment processor. We receive confirmation that a payment succeeded or failed, but never your card number or full billing details.

Technical information

Basic technical logs (e.g. error logs) generated by our hosting provider to keep the Service running — we don't run third-party ad trackers or sell any of this.

2. How We Use It

• To provide the Service — store your tenders, show them back to you, calculate follow-up reminders.
• To send you emails you've asked for: daily follow-up/deadline reminders, and (if enabled for your role) notifications when a job's stage changes.
• To process your subscription payment, via Stripe.
• To respond if you contact us for support.

We do not sell your data, and we do not use it to train any third-party AI model or for advertising.

3. Who We Share It With

We use a small number of trusted service providers ("subprocessors") to run TenderLog. We only share what each of them needs to do their job:

• Supabase — hosts our database and handles account login. This is where your Company's data actually lives.
• Stripe — processes subscription payments.
• Resend — sends the automated reminder and notification emails described above.
• Netlify — hosts the TenderLog website and app files.

We don't share your data with anyone else, except if required by law.

4. Data Separation Between Companies

TenderLog is used by multiple companies. Access controls built into our database (Row Level Security) mean your Company's data is only ever visible to accounts belonging to your Company — never to another Company using TenderLog.

5. Security

We take reasonable, industry-standard steps to protect your information, including encrypted storage and transmission, and restricting who can access production systems. No system is 100% secure, and we can't guarantee absolute security — but we will notify affected Admins without undue delay if we become aware of a data breach involving your Company's data.

6. Data Retention

We keep your data for as long as your account is active. If you cancel your subscription or close your account, we retain your data for a reasonable period afterwards in case you want to export it, and then delete it, except where we're required to keep records for longer (e.g. billing records, for tax purposes).

7. Your Rights

You can ask us to access, correct, export, or delete the personal information we hold about you by emailing hello@tenderlog.com.au. Admins can also update or remove most information directly within TenderLog's Settings.

8. Small Business Status

As a small business, TenderLog may currently fall under the small business exemption in the Australian Privacy Act 1988 (for businesses with turnover under $3 million/year). Regardless of whether the exemption applies, we handle your data in line with the practices described in this policy.

9. Children

TenderLog is a business tool and is not directed at, or intended for use by, children.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll let Admins know by email or an in-app notice.

11. Contact

Questions, or want to exercise your rights over your data? Email hello@tenderlog.com.au.