Privacy policy

Controller

CodePixelfy LLC, which operates the Bidvalio service. Data protection contact: contact@bidvalio.com.

What data we process

• Contact and billing data: name, email, company, tax ID, billing address (collected by Stripe).
• Uploaded documents: the tender documentation and the bid. These may contain personal data of third parties, for example the experts' CVs.
• Technical data: IP address when the terms are accepted, the language chosen, security logs.

Why and on what legal basis

• Performance of the contract: carrying out the check and delivering the report.
• Legal obligations: invoicing and accounting records.
• Legitimate interest: security of the service, fraud prevention, improving the checking rules based on aggregated statistics, without the clients' documents.

Who else has access

• Hetzner Online GmbH: hosting and storage in data centres in Germany (EU).
• Anthropic: the provider of the AI models that analyse the documents, via API. Data sent through the API is not used to train models.
• Stripe: payment processing. Resend: sending emails.

Where a provider processes data outside the EU, the transfer takes place on the basis of the European Commission's standard contractual clauses.

How long we keep the data

• Uploaded documents: at most 90 days from delivery of the report, or less on request.
• The report: as long as the client needs it, at most 2 years, after which it is deleted.
• Billing data: the period required by tax legislation.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with the supervisory authority in your EU country of residence or work (in Romania, ANSPDCP). Write to us at the address above.