§ 01
In short
Bidzo Technologies LLP collects only the data needed to run your account and the procurement workflows you have asked us to run. We do not sell your data. We do not run third-party analytics or advertising trackers on this marketing site. You can ask us to access, correct, or delete your personal data at any time. The full statutory disclosures — Data Fiduciary identity, lawful basis for each purpose, your rights under the DPDP Act 2023, the grievance redressal escalation path, and cross-border transfer details — live at /trust/dpdp.
§ 02
What we collect
Account data you provide at signup (name, email, phone, organization), data generated through platform usage (bids, documents, audit events, messages), and technical data (IP address, browser, device) for security and abuse prevention. See /trust/dpdp § 'Categories of personal data we process' for the itemized list.
§ 03
How we use your data
To operate the modules you have enabled, send transactional notifications, respond to support, monitor security, and meet legal obligations. We do not use your data to train AI models for parties outside your organization.
§ 04
Who we share with
Only service providers necessary to operate the platform — payment processors, cloud infrastructure, email delivery, AI providers for in-app assistant features. The current list of sub-processors is published at /trust/sub-processors. We do not sell your data and we do not share it with advertising networks.
§ 05
Cookies and analytics
This marketing site does not run third-party analytics (no Google Analytics, no Mixpanel, no Hotjar, no advertising pixels) and uses only essential cookies for session management on the application portal. If we add analytics in the future, we will publish a cookie banner with an explicit opt-in before deploying it.
§ 06
Your rights
You have the right to access, correct, update, and request erasure of your personal data, to nominate someone to act on your behalf, and to escalate any unresolved grievance to the Data Protection Board of India and TDSAT. Write to [email protected] — full process at /trust/dpdp § 'Grievance redressal escalation path'.
§ 07
Retention and security
Personal data is retained while your account is active or as required by law. Identifying data is deleted within 90 days of account closure unless retention is required (e.g., GST/tax records under the Income Tax Act). Security posture is described at /trust/security.
§ 08
Full statutory disclosures
This page is a summary. For the complete disclosures required under the DPDP Act, 2023 and the DPDP Rules, 2025, please read /trust/dpdp.