Privacy notice
Notice version 2026-10-26
What we collect
Your name, official email, mobile number (if you give it) and login records. For vendors: the firm's details you or the organisation enter (PAN, GSTIN, address, bank account for payments), and what you submit in the portal: bids, documents, invoices, replies.
Why
To evaluate tenders, award and run contracts, make and receive payments, send you letters and alerts, and keep the record that public procurement requires. Nothing is used for any other purpose or sold.
Who sees it
Officers of the organisation you deal with, each only for their role and unit; the bank, the GST portal, NeSL and the financial system only for the payments, invoices and guarantees they handle; auditors with a lawful right to see the records. Each organisation's data is kept apart from every other's.
How long
Contract files, bills, letters and the audit trail are kept for the organisation's record retention period, as the law requires. Login sessions are deleted after 90 days and copies of email and SMS alerts after 180 days.
Your rights
You can see the data held about you, have it corrected, ask for it to be erased where no law requires it to be kept, nominate someone to act for you, and raise a grievance with the organisation's grievance officer, who answers within 90 days. If you are not satisfied, you may approach the Data Protection Board of India.
How it is protected
Encrypted in transit and at rest, two-factor sign-in, access by role, an audit trail of every action that cannot be altered, and automatic sign-out after inactivity.