Draft launch notice · updated 1 September 2026

Privacy notice

Public data collection is disabled. The legal controller name and service address are not yet confirmed. TenderMeter will not accept live free-scan submissions until those facts are supplied and this notice is finalized.

What the requested scan will use

When enabled, the free scan will collect a company website/domain, work email, optional country, request timestamp, consent record, acquisition source, and limited anti-abuse data. The profiler reads only a bounded set of publicly accessible company pages and stores source URLs and short evidence excerpts.

Purposes and legal basis

The website and work email will be used to perform and deliver the scan the visitor requested, maintain request integrity, prevent abuse, and diagnose delivery or processing failures. Separate marketing consent is not bundled into the scan request.

Sources and processors

Tender facts come from the EU Tenders Electronic Daily service. Supabase hosts the control-plane data, Cloudflare serves and protects the public website, Resend is planned for transactional report delivery, and a private outbound-only Windows worker performs qualification. The local model does not determine source tender facts.

Retention and rights

The launch target is a 90-day retention period for generated free-scan reports and a 180-day operational/evidence window unless a customer relationship, security incident, or legal obligation requires otherwise. A requester may ask for access, correction, deletion, restriction, or export through privacy@tendermeter.com. Final retention wording remains part of the legal launch gate.

Cookies and tracking

The initial public site uses no advertising trackers and no non-essential cookies. Authentication tokens for the owner console are session-only and are not used for visitor analytics.