Launch notice · updated 1 September 2026

Privacy notice

Controller: Denis Pavlov, operating TenderMeter in Bulgaria. Privacy and data requests: connect@tendermeter.com. Public scan collection remains disabled until the operator's geographic service address is published.

What the requested scan will use

When enabled, the free scan will collect a company website/domain, work email, optional country, request timestamp, consent record, acquisition source, and limited anti-abuse data. The profiler reads only a bounded set of publicly accessible company pages and stores source URLs and short evidence excerpts.

Purposes and legal bases

The company website and work email are processed to take steps requested by the visitor and deliver the scan. Consent records, rate-limit fingerprints, security logs, and failure records are processed to protect the service and establish that a request was authorized. Separate marketing consent is not bundled into the scan request, and requested-scan data is not used for automated cold outreach.

Sources, recipients and processors

Company evidence comes from the submitted public website, and tender facts come from the EU Tenders Electronic Daily service. Supabase hosts application and queue data, Cloudflare serves and protects the website, Resend is the planned transactional delivery provider, Google Workspace handles human correspondence, and a private outbound-only worker performs qualification. These providers receive only the data required for their role. Where a provider processes data outside the EEA, TenderMeter relies on the provider's applicable contractual and transfer safeguards.

Automated processing

TenderMeter uses deterministic rules and local language models to produce business decision support. The free scan does not make a decision that produces legal or similarly significant effects about an individual. Official procurement documents remain authoritative.

Retention

Generated free-scan reports are normally retained for 90 days. Operational records and source evidence are normally retained for up to 180 days. Records may be kept longer when a customer relationship, security investigation, dispute, or legal obligation requires it. Rate-limit fingerprints are pseudonymous and used only for abuse prevention.

Your rights

Depending on the circumstances, a person may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where consent is the basis. Requests can be sent to connect@tendermeter.com. A person may also complain to the Bulgarian Commission for Personal Data Protection or the competent supervisory authority where they live or work.

Cookies and tracking

The initial public site uses no advertising trackers and no non-essential cookies. Authentication tokens for the owner console are session-only and are not used for visitor analytics.