1. Responsible party
TenderBriefing (operated from South Africa) is responsible for processing personal information collected through this platform. Contact: support@tenderbriefing.co.za.
2. Information we collect
- Account details: name, email, company name, CSD number, province, sectors
- Contact: phone and WhatsApp numbers for operational notifications
- Operational: attendance requests, briefing reports, payment references (not card data)
- Technical: authentication tokens, usage logs, and device tokens for push notifications
3. Purpose of processing
We process data to match SMEs with Youth Agents, deliver briefing reports, send WhatsApp and email updates, improve dispatch reliability, comply with audit requirements, and meet legal obligations.
4. Lawful basis
Processing is based on contract performance (service delivery), legitimate interest (platform security and analytics), and consent where required (e.g. marketing messages).
5. Sharing
SME contact details relevant to an assignment are shared with assigned Youth Agents. Payment data is handled by Yoco when enabled. Infrastructure providers (Google Cloud, Firebase, Twilio) process data under their agreements. We do not sell personal information.
6. Retention
Records are retained for operational, dispute, and legal purposes, then deleted or anonymized when no longer required.
7. Your rights
Under POPIA you may request access, correction, deletion, or objection to processing. Email support@tenderbriefing.co.za. You may lodge a complaint with the Information Regulator.
8. Security
We apply access controls, encrypted transport, role-based Firestore rules, and admin-only operational telemetry. No system is fully secure; report concerns promptly.
9. Cross-border processing
Some subprocessors may process data outside South Africa with appropriate safeguards as required by POPIA.
10. Updates
This policy may be updated for pilot and commercial launch. Check this page for the latest version.