TENDER OS — POPIA PRIVACY POLICY

1. Data Collection and Purpose Specification

In strict compliance with the Protection of Personal Information Act (POPIA) of South Africa, Tender OS collects and processes personal information solely to provide business-to-business procurement tracking features. During account configuration, the platform collects user industry and provincial choices to accurately filter, categorize, and prioritize relevant public sector opportunities on your active dashboard.

2. Direct Marketing and Communications

By maintaining an active account profile, you acknowledge that user emails are processed and used for the delivery of the automated "Daily Dragnet" notification system. The "Daily Dragnet" contains synchronized analytical reports detailing newly published tenders matching your preset business criteria.

3. Cookies, Analytics and Advertising Measurement

While sign-ups are paused, this website has no sign-in. It uses cookies, Google Analytics and the Meta (Facebook) Pixel, in your browser only, to measure how visitors find and use the site — including whether our advertising brings people here. No signup or account details are collected or shared with Meta. You may object to this processing at any time via [email protected].

If you join the waitlist, we receive your email address and anything you write in your message. We keep it only to tell you when Tender OS reopens, and delete it on request via [email protected].

If you unsubscribe using a link in one of our past emails, we record your account reference, which emails you stopped and when, with our hosting provider Cloudflare (which may store it outside South Africa), and apply it before any email is sent again.

Before the pause, when someone created an account, their signup details were shared with Meta for advertising measurement, in irreversibly hashed form only. That no longer happens.

Google and Meta process this information on servers outside South Africa, including in the United States, under their own data protection terms.

Once you have an account, we send Google Analytics an identifier for that account, so that activity from the same person on different devices is measured as one person rather than several. We also store the identifier Google Analytics assigns to your browser alongside your account, so that a later subscription can be matched back to the advertisement or link that first brought you here. Neither identifier is your name, your email address, or anything a person could read — they are random references, and they are deleted with your account. You may object to this processing at any time via [email protected].

Separately from the third-party tools above, we keep our own first-party records of how your account uses the product — for example which setup steps you complete and which parts of the platform you open — so we can find and fix the places where it is hard to use. These records stay in our own systems, are never sold or shared with advertising platforms, and are deleted with your account. (The identifiers described in the paragraph above are the exception, and are shared with Google Analytics only for the measurement purposes stated there.) You may object to this processing at any time via [email protected].

4. Data Subject Participation and Erasure Rights

We respect your right to privacy and data control. Users retain absolute structural authority over their records. If you wish to withdraw consent or remove your business credentials from our processing networks, [email protected] serves as the explicit point of contact for data deletion requests. All erasure applications will be executed within standard statutory timeframes.