Privacy Policy
Introduction
Tyson Farrington trading as Tendera (ABN 53 167 065 457) ('Tendera', 'we', 'us', 'our') operates the Tendera platform at tendera.com.au — an AI-powered tender discovery and response platform built for Australian tradies and small-to-medium enterprises.
We are committed to protecting the privacy of our users in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our platform.
By creating an account or using our services, you agree to the practices described in this policy.
Who We Are
- Business Name: Tendera
- Registered Holder: Tyson Farrington trading as Tendera
- ABN: 53 167 065 457
- Website: tendera.com.au
- Privacy Contact: privacy@tendera.com.au
For all privacy-related inquiries, requests to access or correct your data, or complaints, please contact us at privacy@tendera.com.au.
What Information We Collect
We only collect personal information that is necessary to provide you with our services.
3.1 Information You Provide Directly
- Full name and email address (used to create and manage your account)
- Business name and ABN (used to personalise your tender feed)
- Trade category, service region, and business capacity (used for AI-powered tender matching)
- Saved tender responses, text snippets, and business documents you upload to the platform
- Payment information — we do not store your card details; payment is processed directly by Stripe
- Communications you send to us, including support requests
3.2 Information Collected Automatically
- Usage data — pages visited, features used, session duration, and interactions within the platform
- Device and browser information — browser type, operating system, screen resolution
- IP address and general location (city/state level)
- Log data — server logs including request timestamps and error reports
3.3 Information We Do Not Collect
We do not collect sensitive information as defined by the Privacy Act (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily provide it as part of a tender response document you store on our platform. In that case, you are providing it to yourself — we do not use it for any other purpose.
How We Use Your Information
We use your personal information only for the purposes for which it was collected:
- To create and manage your Tendera account
- To match you with relevant tender opportunities using our AI engine
- To generate AI-assisted summaries and response drafts based on your business profile
- To send you real-time alerts and notifications about matching tenders (Pro tier)
- To send you weekly digest emails (Free tier) and service-related communications
- To process your subscription payments via Stripe
- To improve and develop the Tendera platform based on usage patterns
- To respond to your support requests and communications
- To comply with our legal obligations
We will not use your information for any purpose that is incompatible with the purpose for which it was collected without your explicit consent.
AI Processing and Automated Decision-Making
Tendera uses artificial intelligence to power its core features:
- Tender Matching: Our AI engine analyses your business profile (trade, region, capacity) and scores tenders against it to produce a match percentage. This is automated, but does not make binding decisions — you remain in full control of which tenders you pursue.
- Document Summarisation: When you view a tender, our AI analyses the tender document and generates a plain-English summary. This is processed using Anthropic Claude, a third-party AI model (see Section 6).
- Response Drafting: When you request an AI-assisted draft, your saved business profile and snippets are passed to Anthropic Claude to generate a draft response. You review and edit this output before submitting anything.
Our AI assists you — it does not make decisions about you.
Third-Party Services and Overseas Disclosure
6.1 Anthropic (AI Processing)
We use Anthropic Claude (Anthropic, PBC, United States) for AI-powered tender analysis, summarisation, and response drafting. When you use these features, relevant content — including your business profile, saved snippets, and tender documents — is transmitted to Anthropic's servers in the United States for processing. Anthropic's privacy policy.
6.2 Stripe (Payment Processing)
Subscription payments are processed by Stripe, Inc. (United States). We do not store your payment details. Stripe's privacy policy.
6.3 Resend (Email Delivery)
Transactional emails, alerts, and digest emails are sent via Resend (United States). Your email address and notification content are processed by Resend. Resend's privacy policy.
6.4 PostHog (Analytics)
We use PostHog for product analytics. PostHog collects usage data, session information, and device details. PostHog's privacy policy.
6.5 Hosting Infrastructure
The Tendera platform is hosted on Australian cloud infrastructure (AWS ap-southeast-2, Sydney region). Your account data and stored documents are held on Australian servers.
Data Security
We take reasonable technical and organisational steps to protect your personal information:
- All data transmitted between your browser and our platform is encrypted using HTTPS/TLS
- Passwords are stored using industry-standard one-way hashing (bcrypt)
- Database encryption at rest on our hosting infrastructure
- Access controls limiting who can access production systems and user data
- Regular security reviews and updates to our infrastructure
If you believe your account has been compromised, contact us immediately at privacy@tendera.com.au.
Data Breach Notification
In the event of a data breach likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). We will:
- Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
- Notify affected individuals directly where possible
- Provide information about the breach and steps you can take to protect yourself
How Long We Keep Your Information
We retain your personal information for as long as your account is active and as long as necessary to provide our services. If you close your account, we will delete your personal information within 30 days, except where required by law (e.g. financial records retained for 7 years under the Corporations Act 2001).
Usage logs and analytics data are retained in aggregated, de-identified form for platform improvement purposes.
Your Rights
Under the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or out-of-date information
- Request deletion of your account and associated personal data
- Opt out of marketing and digest emails at any time using the unsubscribe link in any email
- Make a complaint if you believe we have handled your personal information in breach of the Privacy Act
We will respond to access and correction requests within 30 days at no charge.
Commercial Electronic Messages
All commercial emails comply with the Spam Act 2003 (Cth). Every commercial email we send will:
- Only be sent to recipients who have consented
- Clearly identify Tendera as the sender
- Include a functional unsubscribe mechanism
Transactional emails (account confirmations, security alerts) cannot be unsubscribed from while your account is active.
Children's Privacy
Tendera is a business platform intended for adults. We do not knowingly collect personal information from individuals under 18. Contact privacy@tendera.com.au if you believe a minor has provided us with data.
Changes to This Policy
We may update this policy to reflect changes in our practices or legal obligations. We will notify you by email and update the 'Last Updated' date. We will provide at least 14 days' notice before material changes take effect.
How to Make a Privacy Complaint
Contact us first:
- Email: privacy@tendera.com.au
- Response time: 5 business days
If unsatisfied, contact the OAIC:
- Website: oaic.gov.au
- Phone: 1300 363 992
- Mail: GPO Box 5218, Sydney NSW 2001