Legal

Privacy policy

Last updated September 24, 2026

01Who is responsible

TenderIQ is operated by Kyros Groupe (9547-6636 Québec inc.), based in Montréal, Québec, Canada. Contact our privacy team at privacy@tenderiq.ai about personal information, a rights request or a privacy concern.

privacy@tenderiq.ai

02Information we use

We process account and company profile details, subscription records, saved opportunities, uploaded documents, proposal drafts and the information you send through forms or service requests. Stripe processes payment card details; TenderIQ stores subscription and payment references, rather than full card numbers.

Advisor conversations and messages are saved so you can return to them. Authorized administrators can review questions and conversations for support and service operation. Chat is not a confidential channel reserved solely for your personal use. Avoid including personal information that is unnecessary for your request.

03AI and professional assistance

We use the content you provide to answer questions, analyze tender documents and help prepare responses. Relevant content is sent to the AI or document-processing providers used for that feature. Review generated work before relying on or submitting it.

When you request a professional review, the assigned team can access the proposal snapshot and instructions you choose to submit. A sourcing request shares your stated region, industry and procurement needs with the team so they can research public opportunities. Request only services and share only material you are authorized to use.

04Service providers and sharing

Providers used to deliver the service include Supabase (accounts and stored records), Vercel (hosting), Anthropic (AI assistance), ParseKit (document analysis), Stripe (payments) and Resend (email). Cloudflare Turnstile may be used to protect forms from abuse. The information each receives depends on the feature you use.

We do not sell personal information. Information may also be disclosed when required by applicable law or to protect the service against fraud and abuse. Optional analytics is separate from the processing needed to operate your account and the services you request.

05Processing locations and local requirements

Service providers may process information outside Québec or Canada. Information processed abroad may be subject to the laws and lawful access powers of that jurisdiction. This website does not offer a guarantee that all data remains in your country.

Our handling of personal information is subject to applicable privacy requirements, including Québec privacy law and PIPEDA where applicable. Before uploading regulated, confidential or location-restricted material, contact privacy@tenderiq.ai to discuss your organization’s requirements and the processing arrangements. This policy is not a certification of compliance with every local law or a promise that a particular residency requirement is supported.

06Security and access

Account authentication and access controls are used to restrict private workspace information. Authorized service personnel may access information needed for support, administration and requested professional assistance. No online service can guarantee complete security. Report suspected unauthorized access promptly to privacy@tenderiq.ai.

07Cookies and privacy choices

Essential cookies support authentication, security and your saved privacy choice. Optional first-party page analytics stays off unless you choose Allow analytics. You can refuse it without losing access to the service, and reopen Privacy preferences to withdraw consent at any time. A Global Privacy Control signal keeps optional analytics off.

If enabled, analytics records visits to selected public marketing pages, a random browser identifier, broad device type and country information supplied by our hosting service. It does not record your chat messages, uploads, proposals, private workspace routes, search terms or account identity. Google Ads and Vercel Analytics scripts are not loaded. Withdrawing consent stops new optional events and clears the browser analytics identifier; it does not by itself delete records already collected.

08Retention and your rights

Account, chat and workspace records are retained to provide ongoing services. Contact us to request access, correction, deletion, a portable copy where applicable, or withdrawal of consent. Some records may need to be retained for legal, billing, security or dispute-resolution purposes. We will explain any limits that apply to your request and handle it within applicable legal requirements; this policy does not promise automatic deletion within a fixed number of days.

We may need to verify your identity before acting on a request. Withdrawal of consent for processing needed to deliver a feature may mean we cannot continue that feature. You can also raise a concern with the privacy regulator responsible for your jurisdiction.