Legal
Last updated: August 26, 2026
TenderMaze ("we", "us") operates a procurement-triggered B2B sales intelligence platform that turns European Union public contract-award data into scored sales opportunities. This policy explains what personal data we collect, why, and the rights you have over it. For questions, contact us at info@tendermaze.com.
Account data: your name, work email, company name, and authentication details when you register. Profile data: the sales profiles you create — what you sell, target markets, deal-size bands, signal and exclusion keywords, and score thresholds. Usage data: pages viewed, searches, saved pipeline entries, and plan selections. Technical data: IP address and basic browser information collected through standard logs and cookies.
Company names, summaries, website and LinkedIn links, and contact details shown in the Service are derived from public EU procurement notices and public web sources. This data is about third-party companies, not about you personally. We process it to present scored opportunities and company intelligence pages.
To provide the Service: authenticating you, running matching against your sales profiles, sending alert emails, and showing your pipeline. To manage billing: processing payments through our payment provider and maintaining subscription records. To improve the Service: aggregating usage to understand feature adoption and fix issues. To meet legal obligations: retaining records where required by law or tax regulation.
We process your account data under the contract we form when you register (Article 6(1)(b)). Profile and usage data are processed to deliver the Service you requested. Billing data is processed under our legal obligation and the contract. On rare occasions we may use aggregated, anonymised usage to improve the Service under our legitimate interest (Article 6(1)(f)).
If you enable email notifications, we send alert digests to the address on your account when a new procurement award matches your sales profile. You can toggle email notifications off at any time from your account page. We never sell your email address or use it for marketing beyond transactional messages about your account and subscription.
We share data only with sub-processors that help us run the Service: a managed database and authentication provider for account and profile data, a payment provider for billing, an email delivery provider for transactional and alert messages, and an AI provider that helps generate sales narratives and company summaries from your profile inputs. Each sub-processor is bound by a data-processing agreement. We do not sell your personal data to third parties.
Some sub-processors may process data outside the European Economic Area. Where this happens, we rely on Standard Contractual Clauses or an adequacy decision to ensure a level of data protection equivalent to EU law.
We keep your account, profile, and pipeline data for as long as your account is active. If you cancel a paid plan, we retain your data so you can resume under the free limits; nothing is deleted on downgrade. If you delete your account, we remove your personal data within a reasonable period, except where retention is required by law (for example, tax records of payments).
We protect your data with encryption in transit and at rest, row-level security on the database, and least-privilege access for our staff. Access to production data is logged and reviewed. We never expose the service-role key or database credentials to the client application. Despite these measures, no system is perfectly secure; we will notify affected users without undue delay in the event of a personal-data breach.
Under the GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly from your account page (export pipeline, toggle notifications, delete account). For any request, contact info@tendermaze.com and we respond within one month. You also have the right to lodge a complaint with your local data-protection authority.
The Service is intended for business use. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us and we will remove the account.
We use essential cookies to keep you signed in and remember your session. We do not use third-party advertising cookies. Analytics, where used, is aggregated and does not profile you individually. Most browsers let you refuse or delete cookies; some features may stop working if you do.
We may update this policy as the Service evolves. Material changes are announced in-app or by email. The most recent version is always available on this page, with the updated date shown above.