Privacy Policy

This Privacy Policy explains what personal information TenderLog (provided by Blanca Gonzalez, trading as TenderLog, "we", "us") collects through the TenderLog app and website, how we use it, and your rights over it.

1. What We Collect

Account information

• Name and email address, when you or a teammate creates an account.
• Company name.

Data you enter into TenderLog

• Tender/job details: project names, reference numbers, dates, prices, and stages.
• Contact details of the builders or clients you work with that you choose to record (such as name, role, phone and email).
• Documents and files you attach to a job (for example RFQs, quotes and purchase orders) and your company logo.
• Notes, feedback, and follow-up history you or your team add.

Billing information

Handled entirely by our payment provider. We receive confirmation that a payment succeeded or failed, but never your card number or full billing details.

Technical information

Basic technical logs (e.g. error logs) generated by our hosting provider to keep the Service running — we don't run third-party ad trackers or sell any of this.

2. How We Use It

• To provide the Service — store your tenders, show them back to you, calculate follow-up reminders.
• To send you emails you've asked for: daily follow-up/deadline reminders, and (if enabled for your role) notifications when a job's stage changes.
• To process your subscription payment.
• To respond if you contact us for support.

We do not sell your data, and we do not use it to train any third-party AI model or for advertising.

3. Who We Share It With

We use a small number of trusted service providers ("subprocessors") to run TenderLog. We only share what each of them needs to do their job:

• Database and login — where your Company's data actually lives, on servers in Seoul, South Korea.
• Payments — processes subscription payments.
• Email delivery — sends the automated reminder and notification emails described above.
• Website hosting — serves the TenderLog website and app.

This means your information is stored and processed outside Australia, mainly in South Korea, and some of our other providers may process limited data in other countries, including the United States. We don't share your data with anyone else, except if required by law. You can ask us for the current list of providers at any time.

4. Data Separation Between Companies

TenderLog is used by multiple companies. Access controls built into our database (Row Level Security) mean your Company's data is only ever visible to accounts belonging to your Company — never to another Company using TenderLog.

5. Security

We take reasonable, industry-standard steps to protect your information, including encrypted storage and transmission (data is encrypted at rest and in transit), automatic daily backups that are kept for 7 days, always-on production-grade hosting, never storing passwords in readable form, and restricting who can access production systems. No system is 100% secure, and we can't guarantee absolute security — but we will notify affected Admins without undue delay if we become aware of a data breach involving your Company's data.

6. Data Retention

We keep your data for as long as your account is active. If you cancel your subscription or close your account, we keep your data for 90 days afterwards (your account stays read-only so you can view and export it), and then delete it, except where we're required to keep records for longer (e.g. billing records, for tax purposes). Deleted data may remain in our automatic daily backups for up to 7 days before those backups expire.

7. Your Rights

You can ask us to access, correct, export, or delete the personal information we hold about you by emailing hello@tenderlog.com.au. Admins can also update or remove most information directly within TenderLog's Settings.

8. Small Business Status

As a small business, TenderLog may currently fall under the small business exemption in the Australian Privacy Act 1988 (for businesses with turnover under $3 million/year). Regardless of whether the exemption applies, we handle your data in line with the practices described in this policy.

9. Children

TenderLog is a business tool and is not directed at, or intended for use by, children.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll let Admins know by email or an in-app notice.

11. Contact

Questions, or want to exercise your rights over your data? Email hello@tenderlog.com.au.