Privacy Policy

This policy explains how BidVexa AI("we", "us") collects and uses personal data when you use www.bidvexa.in and the BidVexa AI service. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

1. Data we collect

• Account data: name, company name, work email, mobile number, password (stored hashed).
• Company profile: documents and details you upload, such as GST, PAN, Udyam/MSME, NSIC, ISO and other certificates, turnover, past projects, product catalogues and website.
• Tender documents: tender files you upload for analysis, and bid drafts the service generates.
• Billing data: plan, invoices and payment status. Payments are processed by Razorpay; we do not store your card, UPI or bank details.
• Usage data: pages visited, features used, device and browser information, IP address and cookies.

2. Why we use it

• To create your account and provide the service: matching tenders, calculating Fit Scores, and preparing bid workspaces.
• To bill you and send invoices.
• To send tender alerts, service messages and, where you agreed, product updates by email or WhatsApp. You can opt out of marketing at any time.
• To provide support, prevent fraud, and keep the service secure.
• To meet legal and tax obligations.

We rely on your consent (given at signup) and on what is needed to perform our contract with you. You may withdraw consent at any time; this may stop parts of the service from working.

3. AI processing

Your company profile and tender documents are processed by AI models to produce analyses and drafts. We use third-party AI providers under contracts that bar them from using your data to train their models. We do not sell your data, and we do not share your company profile with other customers.

4. Who we share data with

• Service providers who help us run BidVexa: hosting (DigitalOcean), payments (Razorpay), AI model providers, and email/messaging providers.
• Authorities, where required by law.

Some providers may process data outside India, with appropriate safeguards and as permitted under Indian law.

5. How long we keep it

We keep account and profile data while your account is active. After you delete your account we delete or anonymise it within 90 days, except invoices and records we must keep under tax law (generally 8 years).

6. Your rights

You can ask to access, correct, update or erase your personal data, withdraw consent, and nominate someone to exercise these rights on your behalf. Email [email protected]; we respond within 30 days.

7. Security

We use encryption in transit (HTTPS), access controls and hashed passwords. No system is fully secure; we will notify you and the authorities of a personal data breach as required by law.

8. Cookies

We use essential cookies to keep you signed in, and analytics cookies to understand how the site is used. You can block cookies in your browser; some features may then not work.

9. Grievance Officer

Grievance Officer, BidVexa AI
Email: [email protected]
Address: Chennai, Tamil Nadu, India

If you are not satisfied with our response, you may approach the Data Protection Board of India.

10. Changes

We may update this policy. We will post the new version here and email you about significant changes.