Privacy policy

TenderCheck Ghana (“TenderCheck”, “we”) is the data controller for the personal data described below. Our data-protection contact is privacy@tendercheck.gh.

• Account data: name, email address and a hashed password, handled by our authentication provider.
• Tender documents you upload, and the analysis we generate from them.
• Company documents you upload, which may contain personal data such as director names, staff CVs or signatures.
• Company profile facts you enter, such as registration number, turnover and employee count.
• Technical data needed to run and secure the service: a hashed IP identity, request timestamps and abuse signals.
• Payment records: reference, amount, status and channel (for example mobile money or card). Card and mobile-money payments are processed by Paystack; we never see or store card numbers or MoMo PINs.

We process your documents to perform the analysis you requested, to compare your company against a tender, to produce reports, to secure the service against abuse, and to comply with legal obligations. Our lawful bases are the performance of our contract with you, your consent where we ask for it, our legitimate interest in preventing abuse, and legal obligation.

To extract requirements, the text of the document you upload is sent to our AI provider (DeepSeek) for processing. That means document text may be processed outside Ghana. We send only what is required for the analysis and never send your account credentials. Before company documents such as CVs and bank statements are sent, personal identifiers the check does not need (phone numbers, email addresses, Ghana Card and SSNIT numbers, dates of birth, account numbers) are masked. If you do not want cross-border processing, do not upload a document — the service cannot function without it.

Your documents are used only to perform your analysis. They are not used to train AI models.

• Tender documents you upload: deleted automatically 90 days after upload by default, or at once when you delete the analysis from your dashboard.
• Analyses: kept while your account is active so you can reuse them, until you delete them from your dashboard (which also deletes their company checks and reports).
• Company documents: kept in your company vault for reuse across tenders until you delete them from your account settings.
• Report share links: removed after 12 months by default.
• Messages you send us through the contact form: kept for 12 months.
• Payment records: kept as required for accounting and tax purposes.
• Security logs: hashed identifiers, no message text, deleted after 24 months by default.

Under the Data Protection Act, 2012 (Act 843) you may request access to your personal data, correction of inaccurate data, and deletion of data we no longer need, and you may object to certain processing. Email privacy@tendercheck.gh. You can also delete analyses (with their uploaded files) from your dashboard and company documents from your account settings yourself. If you are not satisfied, you may complain to the Data Protection Commission of Ghana.

Documents are stored in private storage, never in a public bucket, and are reachable only through short-lived signed links after an ownership check. Access to production data is restricted and logged. We use rate limits, abuse blocks, upload validation and encryption in transit.

We share data only with the processors required to run the service — hosting, database, AI processing and payment processing (Paystack) — and where the law requires it. We do not sell personal data.

We will update this policy when our processing changes, and the revision date at the top of this page will change with it.