Loading
Loading…
Loading…
Last updated: 20 June 2026
Tenderkart ("we," "our," or "us") is operated by Autopilot Labs Private Limited. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile apps, tender discovery platform, subscriptions, alerts, analytics, document downloads, and AI-assisted tender filing features.
We use PostHog to record user sessions for debugging and improving user experience. These recordings capture:
Sensitive authentication data (OTPs, passwords) is NOT recorded. Session recordings are stored for 90 days and can be deleted upon request by emailing [email protected].
When you sign up for Tenderkart, we collect your phone number to create and manage your account. This information is used for authentication and account-related communications.
With your explicit consent, we will send you One-Time Passwords (OTP) and account notifications via WhatsApp to your registered phone number. You can withdraw this consent at any time.
Push notifications are optional. After you sign in on the Tenderkart mobile app, we surface an in-app rationale explaining how alerts work. We only request operating-system permission and register your device token with Firebase once you tap "Enable Notifications." If you dismiss or decline the prompt, no device token is stored and the app remains fully usable.
You can change your mind at any time from Profile > Notification Preferences or your device's notification settings. Disabling notifications removes the stored token from our servers, and we never send marketing pushes without your consent.
We collect information about how you interact with our platform, including search queries, filters applied, and tenders viewed. This helps us improve our services and provide better recommendations.
We use PostHog to understand aggregated usage patterns and improve product experience on the website, and Firebase Cloud Messaging to deliver push notifications in the mobile app. Depending on your platform and selections, these services may collect:
On the website, analytics is linked to an anonymous identifier stored in your browser and, when you sign in, also associated with your Tenderkart account. We do not enable advertising features or sell analytics data. Data is used solely to improve performance and reliability.
Session replays are enabled in production on the website and inside our native apps (Capacitor shell) to help us diagnose UX issues. Recordings include the full contents of form inputs so we can understand exactly what happened during an issue.
You can disable push notifications anytime from your device settings or within Profile > Notification Preferences.
We use RevenueCat to manage in-app purchases and subscriptions on our mobile apps. RevenueCat collects and processes:
This data helps us manage your subscription, restore purchases across devices, prevent fraud, and provide customer support. RevenueCat's privacy policy is available at revenuecat.com/privacy.
When you purchase a subscription on the Tenderkart website, payment details are processed by Razorpay or another authorized payment gateway. We may receive and store payment status, transaction ID, order ID, amount, plan name, billing period, invoice details, GSTIN if provided, refund status, registered email, and registered phone number for subscription activation, billing support, tax compliance, fraud prevention, and dispute handling.
Tenderkart does not store your full card number, UPI credentials, CVV, banking password, or payment authentication details. Mobile app payments are handled through Apple App Store or Google Play Store systems, with RevenueCat helping us manage subscription status and restore purchases.
We share only the information necessary to process payments, activate subscriptions, issue invoices, handle refunds, prevent fraud, and respond to payment disputes with payment gateways such as Razorpay, app-store providers such as Apple and Google, and subscription infrastructure providers such as RevenueCat.
We do not sell your personal information. Payment processors and app stores process some information under their own privacy policies and security standards, and their rules may apply to purchases made through their platforms.
We use WhatsApp Business API (not consumer WhatsApp) to send you service-related notifications. By opting in to receive WhatsApp messages, you consent to receiving these communications:
You have full control over service notifications across push and WhatsApp:
All WhatsApp messages are protected by end-to-end encryption provided by WhatsApp. Tenderkart cannot read the content of messages sent via WhatsApp - only WhatsApp and the message recipient can decrypt and read them. We only have access to delivery status and metadata.
We will never share your phone number with third parties for marketing purposes without your explicit consent. Your phone number is only used for:
WhatsApp's Privacy Policy: WhatsApp has its own privacy policy that governs how they handle message data. You can review WhatsApp's privacy policy at: https://www.whatsapp.com/legal/privacy-policy
You can delete your Tenderkart account at any time from Profile > Account Controls > Delete accountinside the mobile app. When you confirm deletion, we immediately sign you out, remove saved filters and tender follows, unregister push notification tokens, and mark your profile as inactive so no further alerts are sent.
We retain limited records after deletion to comply with legal, security, and anti-fraud obligations. This includes your phone number, authentication and consent logs, and tender activity history. These records remain segregated from active users and are only accessed if required for audits or disputes. If you need us to purge remaining data sooner, email [email protected] and we will process your request within 30 days, subject to regulatory requirements.
Changed your mind? You can restore the account within 30 days by contacting the same support email. We will re-enable your profile only after verifying ownership of the original phone number.
We rely on PostHog to measure aggregated engagement (for example, which tender categories are most browsed) and to capture session replays to debug issues across surfaces. Session replays are enabled in production on the website and inside the native mobile apps, and recordings include all interaction details, including the text entered into form fields, so we can resolve problems quickly.
We load Google’s advertising tag (gtag.js) with conversion ID AW-17690476381 on tenderkart.in to understand which Google Ads campaigns lead to sign-ups or other key actions. The tag sets cookies or similar identifiers (for example, the_gcl_ family) to attribute visits and sends pseudonymous event data like page views, timestamps, IP-derived location, and browser details to Google for aggregated conversion reporting. We do not share tender content, phone numbers, or WhatsApp consents with Google Ads.
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet is 100% secure.
You have the right to:
If you have any questions about this Privacy Policy, our data practices, payment data, account deletion, or privacy rights, please contact us using the details below.