This policy explains how Tenderna handles personal data when you use tenderna.com. Tenderna is operated by Yalla Company for Website Services W.L.L. (يلا كومباني لخدمات المواقع الإلكترونية ذ.م.م), Commercial Registration (CR) No. 255139, Tax ID (TIN) 5009321498, Doha, State of Qatar, which is the controller of your personal data. We process personal data in line with Qatar Law No. 13 of 2016 on the Protection of Personal Data Privacy.

What we collect

• Account data: your name, work email, password (stored only as a secure hash by our authentication provider) and language preference.
• Company data: company name, country, commercial registration number, phone, website and description.
• Verification documents: commercial registration, trade licence and past-project evidence you upload.
• Tender and bid data: tenders, documents, bids, clarifications, awards, and the timestamped record of actions on them.
• Messages you send through the contact form, and basic technical data needed to run the service securely (for example request logs kept by our hosting providers).

How we use it

To run the platform (accounts, tenders, sealed bids, awards and notifications), to verify companies before they can bid, to keep the tender record, to secure the service and prevent fraud, to answer your messages, and to meet legal obligations. We do not sell personal data and we do not use advertising trackers.

Who can see what

• Verification documents are visible only to your company and Tenderna administrators.
• Bid amounts and proposals are visible only to your company, Tenderna administrators, and the buyer of that tender once bidding has closed.
• If a buyer chooses to stay anonymous, the buyer's identity is hidden from bidders and the public until award.
• The public company directory shows only your company name, country, website, description and verification status. Contact details are shared with a buyer only when you bid on that buyer's tender.
• Questions on a tender are published without the asking company's name.

Where it is stored

Data is hosted by Supabase (database, authentication and file storage, EU region — Frankfurt) and the website by Netlify. These providers act as our processors under contract. Files are kept in private storage and opened only through short-lived signed links.

How long we keep it

Account and company data are kept while your account is active. Tender records, bids and awards are kept for up to 10 years after a tender closes, because they form an audit record both parties may rely on. Contact messages are kept for up to 2 years.

Cookies and local storage

We use only what is strictly necessary: your sign-in session and your language choice are stored in your browser's local storage. We do not use analytics or advertising cookies.

Your rights

You can ask to access, correct or delete your personal data, object to processing, or withdraw consent where processing relies on it. Some tender records may need to be kept to protect other parties or meet legal obligations. Send requests through the contact form (topic: Privacy) or to hello@tenderna.com; we reply within 30 days.

Security

Access to data is enforced in the database itself (row-level security), files are private, every sensitive action is logged, and the site is served over HTTPS with a strict content security policy.

Changes

We will post any changes here with a new date, and notify registered users of material changes.