Privacy, plainly.
TenderVerdict runs on public data and the minimum about you needed to deliver briefs. This page lists what we hold and why. Last updated: 20 September 2026.
Who we are
The data controller is Ihsan Mohamed, registered as a sole trader in Latvia, trading as TenderVerdict. Contact: hello@tenderverdict.com.
What we hold about you
- Your email address and your company domain, because you gave them at signup: they are how briefs reach you and what the judgment is anchored to.
- Your capability profile: drafted from your public website, corrected by you. It contains what your firm does, where it works, and reference work you chose to make public.
- Your verdict feedback (agree or disagree, and any notes), used to measure and improve judgment quality for your account.
- Product events (signup date, briefs sent, source of visit including campaign tags), used to understand what works. No advertising profiles, no data sales.
What we read but do not keep
Your public website pages, read once to draft the profile and again only when you ask for a refresh.
Who processes data for us
- Render: hosting and the database, Frankfurt, EU.
- Cloudflare: this website, DNS and network protection.
- Google: optional website analytics, only when you allow it. See how Google processes information from sites using its services.
- Resend: email delivery.
- Paddle.com: payments. Paddle is the Merchant of Record for every order, which means Paddle takes the payment, charges the tax and issues the invoice. Card details never reach our servers.
- OpenRouter, and through it the model provider it routes to (currently OpenAI), which reads your capability profile against public tender notices to produce each verdict.
No model is trained on your data. Our OpenRouter account is set to route only to endpoints that do not train on request data, and we do not allow prompts to be published to public datasets. A provider may still hold a request briefly for its own abuse monitoring. Public tender notices are public data.
Which law applies
We process personal data under the EU GDPR, and under the UK GDPR as well if you are in the United Kingdom. Your rights below are the same either way, and you can complain to your own national supervisory authority.
Website analytics and your choice
We use Google Analytics 4 on the public marketing website only if you choose Allow analytics. It helps us understand which pages people visit, where visits come from and whether people start or submit the signup form. Google also processes browser and device information and derives an approximate location from the connection. Our tracking does not send the email address, company website or other text you enter in the form. Page addresses sent to analytics exclude query strings and fragments; only approved campaign labels are included separately.
Choosing No thanks keeps Google Analytics off. You can use the site and sign up either way. Use Analytics settings in the footer to change your choice. We store that preference in your browser for up to six months. If your browser blocks storage, the choice applies only to the current page.
When allowed, Google Analytics uses cookies to distinguish visits, with a configured lifetime of up to 90 days. Withdrawing consent stops further collection and removes those cookies from this site; it does not erase reports already collected. We do not enable Google Signals or advertising personalisation. The app separately uses a session cookie to keep you signed in.
Your rights
To request a copy or deletion of your account, profile, briefs, feedback and associated product events, email hello@tenderverdict.com from your account address. Deleting those account records is irreversible. Your website analytics choice is managed separately using Analytics settings in the footer.