Legal
Privacy Policy
This notice explains what personal data Tendex processes, why we process it, the lawful bases we rely on, and how users can exercise their privacy rights.
Last updated: 1 June 2026
Who we are
Tendex provides UK public-sector tender intelligence, alerts, workspace collaboration, and AI-assisted analysis. For account, workspace, billing, analytics, and support data, Tendex is the data controller unless a separate written agreement says otherwise.
Privacy contact: privacy@tendex.ai.
Personal data we process
- Account details, including name, email, authentication identifiers, organization membership, roles, and login metadata.
- Workspace data, including company profile settings, target markets, saved searches, alerts, bookmarks, pipeline records, comments, mentions, and team membership.
- Support and communications data, including messages you send us and operational email delivery records.
- Billing data handled through Stripe, including customer, subscription, invoice, and payment status identifiers.
- Product analytics, diagnostics, logs, and AI usage metadata where enabled or necessary to provide and secure the service.
Purposes and lawful bases
We identify the purposes and lawful bases for processing personal data before using it. The main lawful bases are:
| Purpose | Lawful basis |
|---|---|
| Create and operate accounts, authentication, teams, saved searches, alerts, comments, and pipeline workflows. | Contract: processing is necessary to provide the Tendex service. |
| Protect accounts, investigate abuse, maintain audit logs, debug failures, and keep the service reliable. | Legitimate interests: security, fraud prevention, and service reliability. |
| Send service emails, saved-search alerts, billing messages, and important account notices. | Contract or legitimate interests, depending on the message. |
| Process billing, tax, accounting, and compliance records. | Legal obligation and contract. |
| Use optional analytics cookies and similar technologies. | Consent. You can reject or change optional cookie choices at any time. |
AI processing
Tendex can use AI providers to generate summaries, saved-search criteria, chat responses, and tender analysis. We send the minimum context needed for the requested feature, such as tender text, company preferences, user prompts, and relevant workspace context. Where message-content capture is disabled, LLM analytics records are redacted.
Retention
We keep account and workspace records while your account or organization is active. Operational logs, analytics data, delivery records, and backups are retained only as long as needed for security, reliability, legal, and accounting purposes. Billing records may be retained for statutory tax and accounting periods.
Your rights
You can request access, rectification, erasure, restriction, portability, objection, or consent withdrawal. Signed-in users can download an account data export and submit privacy rights requests from Privacy settings. You can also email privacy@tendex.ai.
If you are unhappy with our response, you can complain to the UK Information Commissioner's Office.
Processors and international transfers
We use vetted suppliers to host, secure, analyze, support, and deliver Tendex. Where data is transferred internationally, we use appropriate contractual safeguards.
Cookies
Essential cookies are required for Tendex to work. Analytics and preference cookies are optional and controlled through the cookie banner. See the Cookie Policy.