Privacy

Last updated 20 August 2026

What we store

• Your email address. It is your identity here, and where the Digest and confirmation mail go.
• Your name. Asked once at signup.
• A password hash. Never the password itself — it is hashed with Argon2 and cannot be read back.
• Your Interests. The phrases you saved to describe what your business does.
• Optional profile fields. City, state, company name and business type, if you filled them in. All skippable, and none of them affects which Tenders you are matched to.
• Your Digest settings. Whether it is on, how often, and when you last received one.
• A consent record. The timestamp at which you agreed to this, which is the thing the DPDP Act asks us to keep.
• Session records. So you stay signed in, and so signing out everywhere can actually end them.

What we do not store

• Payment details. There is no payment step and no processor involved. Nothing is paywalled.
• Advertising or cross-site tracking identifiers. There are none on this site.
• Your bids. Bidding happens on CPPP or GeM. We never see it.

Cookies

One cookie, and it is the one that keeps you signed in. It is set when you log in, cleared when you log out, and there is nothing else on the site that sets one — no analytics cookie, no advertising cookie, no third-party embed that plants one.

Because the only cookie is strictly necessary to a service you asked for, there is no consent banner. A banner that appears when there is nothing to consent to trains people to click through the ones that matter.

Who else sees any of this

The service that delivers our mail. To send you a confirmation link or a Digest, your email address is handed to our email provider. That is the only outside party that receives it.

Our own infrastructure. The application and its database run on servers we operate, and an error-reporting service receives crash diagnostics that are not intended to contain personal data.

We do not sell your data, we do not share it for anyone else’s marketing, and we do not build a profile of you for advertising.

Tender data is not your data

The Tenders themselves are public records published by CPPP and GeM. We read them, normalise them and link back to the portal that published each one. Nothing about your account is sent to a portal, and browsing a Tender here does not tell its buyer anything.

How long we keep things

• Your account, until you delete it.
• Sessions, until they expire or you sign out — signing out everywhere ends all of them at once.
• Digest history, only as long as it is needed to tell you what has changed since the last one, and pruned after a Tender has been closed for about a month.

Your rights

Under India’s Digital Personal Data Protection Act you can see what we hold about you, correct it, withdraw the consent you gave at signup, and have your data erased. In practice:

• Correct it — your Interests are editable on the Feed and your profile in settings.
• Stop the email — turn the Digest off in settings, or use the unsubscribe link in any Digest. That stops the mail and nothing else.
• Erase it — deleting your account removes your profile, your saved Interests and every session, completely. It is not a deactivation.

Withdrawing consent and deleting the account are the same action here, because the consent is what the account runs on.

Children

This is a tool for businesses bidding on government contracts. It is not directed at children and we do not knowingly hold data about them.

Changes to this page

If what we store changes, this page changes with it, and the short version shown above the consent checkbox at signup changes at the same time. The date at the top is the one to check.