1. Who We Are

TenderStatus is a product operated by Nexus LLC (“TenderStatus”, “we”, “us”), a company registered in the State of Qatar, acting as the data controller for the platform at tenderstatus.io. Nexus LLC is affiliated with Felixfusion Corporation, a company incorporated in the United States. We prioritise privacy compliance with Qatar’s Personal Data Protection Law (PDPL — Law No. 13 of 2016) and applicable international standards.
Contact: consulting@tenderstatus.io

2. Data We Collect

2.1 Account & Profile Data

• Name, email address, company name, and job title from registration
• Billing information processed by our third-party payment provider [Payment Processor] (card details are not retained internally)
• Communication preferences

2.2 Usage Data

• Pages visited, features used, and actions taken within the Platform
• Device, browser, IP address, and session identifiers
• Search queries and filters within the tender discovery tools

2.3 Documents & Company Data

• Files you upload to use the knowledge base or proposal features
• AI-generated drafts and outputs created on your behalf

3. How We Use Your Data

We do not use your documents or uploaded data to train AI models.
Processing purposes include:

• Platform operation and feature delivery
• Payment and subscription management
• Transactional communications
• Security incident detection and fraud prevention
• Aggregated, anonymised usage analytics for improvement
• Legal compliance under applicable law

4. Data Residency & Storage

All customer data is stored on Microsoft Azure, Qatar region (Qatar Central), and is primarily processed within the GCC region. Limited access by our affiliated US company, Felixfusion Corporation, or by authorised service providers may occur for support, engineering, and operational purposes. Where such access involves transfer to or remote access from outside the GCC, we apply contractual and technical safeguards consistent with Qatar PDPL and applicable international standards. AI processing is performed via Azure OpenAI Service with data residency controls.

5. Data Sharing

We do not sell personal data. Sharing occurs only with:

• Our payment provider [Payment Processor] for payment processing (limited to order amount and name/email)
• Microsoft Azure for infrastructure and AI services
• Felixfusion Corporation, our affiliated US company, for support, engineering, and operational purposes, subject to appropriate safeguards
• Legal authorities per applicable law or court orders

6. Data Retention

• Active accounts: retained during the subscription period
• Deleted accounts: personal data purged within 90 days
• Financial records: seven years per commercial law requirements
• Uploaded documents: deleted within 30 days of account closure

7. Your Rights

Under Qatar PDPL, individuals may exercise:

• Access to held personal data
• Correction of inaccurate information
• Deletion requests (subject to legal holds)
• Portability in machine-readable formats
• Objection to marketing-related processing

To exercise these rights, email consulting@tenderstatus.io. We will respond within 30 days.

8. Security

Implementation includes TLS encryption in transit, AES-256 encryption at rest, role-based access control, and regular security reviews. Infrastructure hosts on Microsoft Azure, which holds ISO/IEC 27001 certification.

9. Cookies

We use only essential cookies required for authentication and session management. No third-party advertising or tracking cookies are employed. Users may disable non-essential cookies without affecting core functionality.

10. Changes to this Policy

Material amendments require notification at least 14 days before they take effect. Continued platform use signifies acceptance.

11. Contact

Data protection enquiries: consulting@tenderstatus.io
Operated by: Nexus LLC (State of Qatar), affiliated with Felixfusion Corporation (United States)