Privacy Policy

Welcome to BidsAI, a product of REZINIX TECHNOLOGIES PRIVATE LIMITED ("Company", "we", "us", or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of information we receive when you access or use our AI-powered bid qualification and analysis platform, including our website at www.bidsai.in, mobile applications, and related services (collectively, the "Services").

By using our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not access or use our Services.

2.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, phone number, company name, designation, and password.
• Profile Information: Business details, industry sector, company size, and areas of interest.
• Payment Information: Billing address, GST number (if applicable), and payment method details (processed securely through Razorpay).
• Uploaded Documents: Tender documents, bid proposals, and other files you upload for analysis.
• Communications: Information you provide when you contact our support team, provide feedback, or participate in surveys.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type and version, unique device identifiers.
• Usage Information: Pages visited, features used, actions taken, time spent on the platform, search queries.
• Log Data: IP address, access times, referring URLs, error logs.
• Location Information: General location based on IP address (we do not collect precise GPS location).

2.3 Information from Third Parties

• Payment Processors: Transaction confirmation and payment status from Razorpay.
• Analytics Providers: Aggregated usage analytics and performance data.
• Public Sources: Publicly available tender information from government portals.

We use the collected information for the following purposes:

3.1 Service Delivery

• To create and manage your account.
• To provide AI-powered document analysis and bid qualification services.
• To process your uploaded documents and generate insights.
• To deliver tender search results and alerts.
• To process payments and manage subscriptions.

3.2 Service Improvement

• To analyze usage patterns and improve our Services.
• To train and improve our AI models (using anonymized data only).
• To develop new features and functionalities.
• To conduct research and analytics.

3.3 Communication

• To send service-related communications (account verification, billing, updates).
• To respond to your inquiries and support requests.
• To send promotional communications (with your consent).
• To notify you of relevant tenders and opportunities.

3.4 Security and Legal Compliance

• To detect, prevent, and address fraud, security issues, and technical problems.
• To enforce our Terms of Service and other policies.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services, including:

• Cloud hosting providers (for data storage and processing)
• Payment processors (Razorpay for payment processing)
• Analytics providers (for usage analysis)
• Communication services (for email and notifications)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal process (subpoena, court order, or government request)
• Requests from law enforcement agencies
• To protect our rights, privacy, safety, or property
• To investigate potential violations of our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

BidsAI uses Razorpay Software Private Limited ("Razorpay") as our payment gateway partner. When you make payments through our platform:

5.1 Information Collected by Razorpay

• Card details (card number, expiry date, CVV) - transmitted directly to Razorpay
• Bank account details for net banking transactions
• UPI ID for UPI transactions
• Wallet credentials for wallet payments
• Transaction details (amount, timestamp, status)

5.2 How Razorpay Uses Your Information

Razorpay processes your payment information to:

• Process and complete your payment transactions
• Detect and prevent fraudulent transactions
• Comply with regulatory requirements
• Provide customer support for payment-related issues

5.3 Data Security by Razorpay

Razorpay employs robust security measures including:

• PCI-DSS Level 1 certification (highest level of security compliance)
• 256-bit SSL encryption for all data transmission
• Tokenization of sensitive card data
• Regular security audits and vulnerability assessments

5.4 What We Receive

We only receive limited payment information from Razorpay, including:

• Transaction confirmation status (success/failure)
• Transaction ID and reference numbers
• Last four digits of card (for reference purposes only)
• Payment method type used

We do not store full card numbers, CVV, or bank account credentials on our servers. For more information about how Razorpay handles your data, please refer to Razorpay's Privacy Policy.

We use cookies and similar tracking technologies to enhance your experience on our platform.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (authentication, security).
• Functional Cookies: Remember your preferences and settings.
• Analytics Cookies: Help us understand how users interact with our platform.
• Performance Cookies: Monitor platform performance and identify issues.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies
• Clear all cookies when you close your browser

6.3 Do Not Track

Our platform does not currently respond to "Do Not Track" signals. However, you can use browser settings and extensions to limit tracking.

We implement comprehensive security measures to protect your information:

7.1 Technical Safeguards

• SSL/TLS encryption for all data transmission
• Encryption of sensitive data at rest
• Secure cloud infrastructure with multiple redundancies
• Regular security audits and penetration testing
• Intrusion detection and prevention systems

7.2 Organizational Safeguards

• Access controls and authentication requirements
• Employee training on data protection
• Incident response procedures
• Regular security reviews and updates

7.3 Security Limitations

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes.
• Uploaded Documents: Retained for the duration of your subscription plus a grace period; you can delete documents at any time.
• Transaction Records: Retained for 7 years as required by Indian tax and accounting laws.
• Usage Logs: Generally retained for 90 days for security and operational purposes.
• Anonymized Data: May be retained indefinitely for analytics and service improvement.

Upon account deletion request, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

You have the following rights regarding your personal information:

9.1 Access and Portability

You have the right to request a copy of the personal information we hold about you and receive it in a structured, commonly used format.

9.2 Correction

You can update or correct your account information through your profile settings or by contacting us.

9.3 Deletion

You can request deletion of your account and personal information. Some information may be retained as required by law or for legitimate business purposes.

9.4 Marketing Opt-Out

You can opt out of promotional communications by clicking the "unsubscribe" link in emails or updating your notification preferences in your account settings.

9.5 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@bidsai.in. We will respond to your request within 30 days.

Your information may be transferred to and processed in countries other than your country of residence, including India where our servers are located. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards to ensure your information receives an adequate level of protection, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with our service providers
• Compliance with applicable data protection regulations

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@bidsai.in.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this policy.
• We will notify you via email or through a prominent notice on our platform.
• For significant changes, we may provide additional notice or seek your consent where required.

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes acceptance of the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, we have appointed a Grievance Officer to address your concerns regarding data privacy and security:

If you are not satisfied with the resolution, you may escalate your complaint to the appropriate regulatory authority as per applicable Indian laws.

If you have any questions, concerns, or feedback regarding this Privacy Policy or our data practices, please contact us: