Privacy Policy
Last updated: 2026-02-16 · Version 1.0
Information We Collect
We collect account information (name, email, organization name), uploaded procurement documents (RFP/tender PDFs), and anonymous usage analytics. We do not collect government IDs, financial information, or social insurance numbers.
How We Use Your Information
We use your information for account management and authentication, AI-powered document analysis (Shredder extracts compliance requirements), opportunity matching (Scout matches capabilities to procurement opportunities), and aggregated non-identifying usage patterns for service improvement.
Canadian Data Residency
All user data is stored in Supabase (ca-central-1, Montreal, Canada). All compute runs in Vercel (yul1, Montreal). All AI processing uses Vertex AI (northamerica-northeast1, Montreal). No user data leaves Canadian borders.
Data Retention
Account data is retained while your account is active plus 90 days after deletion. Uploaded documents are retained until you delete them. Compliance matrices are retained with their associated documents. Audit logs are retained for 7 years per SOC2 CC7.2.
Your Rights
Under PIPEDA, you have the right to access, correct, and delete your personal information. You may withdraw consent by discontinuing use of the service. To exercise these rights, contact privacy@tendriv.ca.
Changes to This Policy
We will notify users of material changes to this policy via email. Continued use of the service after notification constitutes acceptance of the updated policy.
Questions? Contact privacy@tendriv.ca