Privacy Policy

Effective date: 10.10.2026

This policy describes what data Tender Bot Serbia collects, the purposes of processing, and your rights. Data controller: to be specified.

What data we collect

Email address (passwordless sign-up and sign-in).

Telegram chat ID — to deliver notifications to the bot.

At sign-up we keep the site the form was opened from and the link tag (utm); no personal data.

Search profiles you create (keywords, CPV categories, settings).

Technical logs (IP, request time) for security and abuse prevention.

A hash of the email address (not the address itself) — to prevent repeat use of the trial: one trial per address.

When you sign in with Google we receive your email address, name and a flag that the address is verified; we do not store Google tokens.

Purpose and legal basis

Providing the tender monitoring and notification service.

Legal basis: to be specified.

Sharing with third parties

Hosting infrastructure (VPS provider) and email provider — to operate the service and send emails.

Telegram — to deliver messages to the bot.

AI provider (Anthropic) — the tender technical specification text is sent for automated analysis. We do not sell your data to third parties.

Retention

We keep data while the account is active and as long as needed for the stated purposes. to be specified

You can delete the account yourself in the cabinet (Account) by typing your email to confirm. Deletion is permanent: access is closed at once, Telegram and email are unlinked, and email, phone, notes, folders and tender tracking are deleted or anonymised; search templates are switched off and their names and extra AI context erased. If the account has other users, only your own access is removed and the account stays with them.

After deletion we keep: a hash of the email (trial-abuse protection), billing records, an anonymous deletion record, and technical, non-identifying account records (search template settings without a name, delivery history, AI tender analyses and AI usage counters), not linked to the email.

Self-service re-registration with the same email is not possible; new access is possible only on request sent to to be specified, with the operator's approval.

Your rights

Access, correction, deletion, and withdrawal of consent. You can delete the account yourself in the cabinet (Account); for other rights, contact: to be specified.

Cookies

We use only necessary cookies: session (sign-in) and language (language choice). We do not use advertising cookies.