1. Responsible party and contact
Bidcraft is operated by an operator whose full legal identity must be published before launch. Privacy and access requests: verified contact email not yet supplied. A verified service address still needs to be published. See operator information. The identity or registration of an Information Officer has not been verified here.
2. Information processed
- Bid records you create or import: tender titles, references, deadlines, draft clauses, proposed responses, local review notes, snapshots and evidence references.
- Saved public tender notices, recent discovery search results, local theme and view preferences, and any imported details.
- Files, text, document excerpts, searches and related evidence that you explicitly submit to AI tools.
- Technical request information (such as IP address, user agent and operational logs) that web infrastructure or AI providers may process when you visit or send a request.
Do not upload identity numbers, employee personal data, financial records or confidential client material unless you have an appropriate lawful basis and have verified the AI provider’s data-handling terms for your use.
3. Purposes and processing grounds
The app processes entered data to provide bid editing, search, saved views, review suggestions, and user-requested AI processing. Technical information may be processed for delivery, security and troubleshooting. Applicable POPIA grounds must be assessed against the actual operator, use case and data; this notice does not assume that every document can lawfully be sent to third parties.
4. Storage and retention
Bid projects, versions, saved opportunities, a small result cache and UI preferences are stored in your browser’s localStorage. A service worker may cache visited pages and application assets for offline access. The release has no Bidcraft user accounts, remote bid-database sync, or automatic backups. Local data can remain until you clear the relevant browser/site storage, remove the app, or your browser removes it. Browser-local data is not encrypted with an individual account key.
Bidcraft cannot recover your local data after you clear it, and cannot remotely erase it for you. Export important work before clearing site data. Clearing cookies alone might not remove localStorage or offline caches; use your browser’s site-data controls.
5. AI transfer and third-party processing
When you explicitly use AI drafting, compliance analysis, OCR or live semantic search, supplied text, document contents and relevant vault material are sent from your device to the Bidcraft server and then to Google’s Gemini API when available. Even semantic search may send queries and evidence to Google when configured; if that call is unavailable it falls back to local similarity calculations on the server. These requests are not the same as browser-local-only processing.
Important: Google’s published Gemini API terms allow broader use and possible human review of content submitted to unpaid services; paid services are treated differently. Bidcraft cannot determine or guarantee the billing status of its deployed Gemini account from this privacy notice. Do not submit sensitive, personal or confidential documents unless the operator has separately confirmed suitable processing terms. Processing by external services may take place outside South Africa; South African-only data residency is not promised.
See the AI disclosure and Google Gemini API terms.
6. Analytics, cookies and third parties
Bidcraft’s reviewed application code uses browser storage for functionality and does not currently integrate a dedicated advertising tracker or behavioural analytics SDK. Infrastructure providers may use operational cookies, logs or similar technologies; their behaviour depends on the deployment configuration and is not certified by this notice. External Treasury and Google sites apply their own policies when visited. We do not claim that the entire hosting stack is cookie-free.
7. Sharing and safeguards
The application does not publicly publish your saved proposals. Information is shared with third-party AI systems only as needed for the specific AI feature you invoke, and may be handled by your hosting or network providers to deliver the service. Browser-local files can be exposed to other people with access to your device/browser profile. No security guarantee, account-level access restriction or comprehensive POPIA certification is provided.
8. Your rights and requests
Depending on applicable law, you may ask the responsible party for information about personal data processed on its behalf, request access or correction, object to processing, and request deletion where permitted. Requests relating to data held only in your browser can usually be handled directly by clearing this site’s stored data. If your request concerns server or third-party processing, contact the operator using the published contact information. You may also contact South Africa’s Information Regulator.
9. Children, retention by providers and changes
The tender service is intended for professional and business use by adults, not for children. Third-party processors may retain technical records, logs and requests under their own terms; Bidcraft does not promise immediate erasure of copies in other systems. Material changes to this notice should be documented here with an updated date.