1. Who We Are
WinBidIQ AI (“we”, “us”, “our”) is a SaaS platform that helps small and medium-sized enterprises discover and win government contracts. Our registered contact email is contact@winbidiq.com.
2. Data We Collect
- Account data: email address, password (hashed), company name.
- Profile data: industry, keywords, experience text, certifications — used solely to generate AI matches.
- Usage data: pages visited, features used, match actions — for product improvement only.
- Campaign attribution: if you follow a link marked with UTM parameters, we retain its source and campaign in this browser tab and, if you create an account, with your account metadata. We do not store a cross-site advertising identifier.
- Free-tool measurement: we count visits, starts, displayed results, download initiations and signup-link clicks in daily aggregates by page and campaign. This measurement does not send form entries, document text, company identifiers, account IDs or persistent visitor IDs. IP addresses are not stored in this aggregate table. Browser-tab storage limits repeated counts and remembers the tool used for signup attribution. Do Not Track and Global Privacy Control signals disable this measurement. Infrastructure access logs are separate from these counters.
- Documents (Vault): files you upload for KYC purposes, stored securely in Supabase Storage.
3. How We Use Your Data
- To match your company profile against government tenders using AI.
- To generate proposal drafts tailored to your profile and the tender requirements.
- To send email alerts when high-match opportunities are found (configurable in Settings).
- To improve the matching engine and product experience.
We do not sell your data to third parties.
4. Data Storage & Security
All data is stored in Supabase (EU/US region). Row-Level Security (RLS) is enforced at the database layer — your data is only accessible to your authenticated account. We use HTTPS for all data in transit.
5. Third-Party Services
- Supabase — database, authentication, file storage.
- Google Gemini / Groq — AI processing (profile embeddings, proposal generation). Data is not stored by these providers beyond the request.
- Resend — transactional email delivery.
- Vercel — hosting and edge functions.
6. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, email us at privacy@winbidiq.com. We will respond within 30 days.
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, all personal data is removed within 30 days. Anonymised usage statistics may be retained indefinitely.