Privacy Policy

Effective from 14 May 2026

1. Introduction

TendeX is an AI-assisted procurement document generation platform operated by TendeX Australia Pty Ltd, located in Perth, Western Australia. ABN [TBC]. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What We Collect

We collect the following information: • Account Details: Full name, email address, phone number, organisation name, business address • ABN Information: Your Australian Business Number and entity name (verified via the ABN Register) • Procurement Data: All questionnaire responses, scope documents, supplier details, and generated procurement documents • Logo and Branding: Your organisation logo uploaded for document generation • Usage Analytics: How you interact with the platform (pages visited, features used, document types created) • Billing Information: Name, email, and Stripe payment details (processed by Stripe, not stored by us)

3. How We Use Your Information

We use your information for: • Service Delivery: To generate procurement documents tailored to your organisation • AI Quality Improvement: To train and improve our AI models (your data is anonymised) • Billing and Invoicing: To process subscriptions via Stripe • Communications: To send service updates, new feature announcements, and support responses • Compliance: To meet regulatory and legal obligations

4. Data Storage and Sovereignty

All personal information and procurement data are stored exclusively in Australia, specifically in AWS ap-southeast-2 (Sydney region). We do not transfer or store your data outside Australia. Your data is encrypted at rest and in transit using industry-standard TLS 1.3 encryption.

5. Australian Privacy Principles Compliance

We comply with all Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Our information handling practices are designed to: • Collect only necessary information (APP1) • Use and disclose information for primary purposes (APP2) • Provide access to personal information upon request (APP12) • Correct inaccurate information (APP13) • Protect personal information from misuse (APP11)

6. Third-Party Services

We use the following third-party services: • Stripe: Payment processing for subscriptions (subject to Stripe's privacy policy) • Base44: Platform infrastructure and database hosting (Australian data centres only) • LLM Providers: AI models used for document generation (your data is processed according to our data use agreements) We only share information with third parties as necessary to provide the service.

7. Data Retention

Procurement records, audit logs, and account data are retained for 7 years for regulatory compliance and dispute resolution purposes. After 7 years, data is securely deleted. You may request earlier deletion by contacting hello@tendex.com.au.

8. Your Rights

You have the right to: • Access: Request access to your personal information • Correction: Request correction of inaccurate information • Deletion: Request deletion of your account and associated data (subject to legal retention obligations) • Complaints: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) To exercise these rights, email hello@tendex.com.au.

9. Cookies

TendeX uses session cookies only to maintain your login session and remember your preferences. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings; however, this may affect functionality.

10. Contact and Updates

For privacy inquiries or concerns, contact us at hello@tendex.com.au. This Privacy Policy was last updated on 14 May 2026. We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email.

For questions about this Privacy Policy, contact hello@tendex.com.au