Privacy Policy

Last updated: October 18, 2026. Operator: Marut Marutyan, Yerevan, Armenia. Contact: support@tenderscope.app.

Who we are

TenderScope (the website tenderscope.app, the dashboard, the MCP server and the REST API) is operated by Marut Marutyan, an individual based in Yerevan, Armenia ("we", "us"). We decide how the personal data described here is used and are its controller. Questions and requests: support@tenderscope.app.

In short

• We keep only what we need to run your account: your email, your plan, your watchlists, hashed keys and simple usage counts.
• Our usage records do not contain the text of your searches.
• We do not sell personal data, do not show ads and do not use your data to train AI models.
• The website sets no tracking cookies; the dashboard uses one sign-in cookie.

Data about you (our users)

• Account: your email address, your Google account ID if you sign in with Google, and the date you joined.
• Sign-in: one-time sign-in links (valid for 15 minutes) and dashboard sessions (valid for 30 days). We store them only as hashes.
• API keys and MCP tokens: stored only as hashes; the dashboard shows a short prefix, the creation date and the date of last use.
• Plan and billing status: your plan, extra calls bought, and the Paddle customer and subscription IDs. Card and payment details are collected by Paddle, not by us.
• Usage records: for each call, the operation name (for example search_tenders), whether it came over MCP or REST, a size estimate and the time. They are used to count your monthly limit and to prevent abuse.
• Watchlists and alerts: the filters you save (which can include your query text), the alert channels you choose (email and, if you add one, a webhook address) and the alerts we send you with their delivery status.
• Product analytics: one event when you make your first successful search, linked to your user ID and saying whether it came over MCP or REST. If website analytics is turned on, it runs without cookies or local storage and does not identify you.
• Technical data: IP address and request details that our hosting providers process to deliver and protect the service, kept in short-term logs.

Personal data inside procurement notices

Tender notices are published by public authorities and can include business contact details of the buyer, such as a contact person's name, work email or phone. We process this information as published, in order to make public procurement searchable for our users (legitimate interests and the public availability of the information). We do not use it for marketing or profiling. If you are named in a notice and want us to remove your details from TenderScope, write to support@tenderscope.app; the original notice stays on the official portal.

Why we use data and on what legal basis

• To provide the service you asked for (account, keys, search, watchlists, alerts, plan): performance of our contract with you.
• To apply plan limits, prevent abuse and keep the service secure: our legitimate interests.
• To understand whether new users get value from the service (the first-search event and anonymous website statistics): our legitimate interests.
• Service emails (sign-in links, alerts you set up, important changes to the service or these documents): performance of our contract. We do not send marketing emails without your consent.
• Billing, tax and accounting: handled by Paddle as Merchant of Record; we keep the records required by law.

Cookies

The dashboard uses one strictly necessary cookie, ts_session, to keep you signed in (up to 30 days, or until you sign out). We do not use advertising or tracking cookies. Paddle's checkout may set its own cookies under Paddle's policy when you pay.

Service providers

We share data only with providers that process it on our behalf to run TenderScope:

• Cloudflare: hosting of the website, dashboard, API and MCP server; network security.
• Neon: the database (hosted in the European Union).
• Railway: background jobs that collect tenders and send alerts.
• Resend: delivery of sign-in and alert emails.
• Google: Google sign-in, if you choose it.
• PostHog: product analytics (the first-search event and anonymous website statistics, no search text).
• Paddle: checkout, payments, tax and invoices. Paddle is the Merchant of Record and processes payment data under its own privacy policy.

Webhook alerts go to the address you configure; what happens there is under your control.

International transfers

Our providers may process data in the European Union, the United States and other countries. Where data from the EU, EEA, UK or Switzerland is transferred, we rely on the providers' safeguards, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

How long we keep data

• Sign-in links: 15 minutes. Dashboard sessions: up to 30 days.
• Account, keys, plan, watchlists, alerts and usage records: while your account exists; deleted when your account is deleted.
• Billing records: kept by Paddle as required by tax law.
• Technical logs at our hosting providers: short-term, for security and troubleshooting.

Security

Traffic is encrypted (HTTPS). Keys, sessions and sign-in links are stored only as hashes. Webhook alerts are signed so that you can verify they come from us. The database is not publicly accessible.

Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, California law or the Law of the Republic of Armenia on Protection of Personal Data), you can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw consent where we rely on it. Write to support@tenderscope.appfrom the email linked to your account; we answer within 30 days. To delete your account, send the same request. You can also complain to the data protection authority where you live. We do not sell or share personal data for cross-context advertising and do not treat you differently for using your rights.

Children

TenderScope is a business tool for people aged 18 and over. We do not knowingly collect data from children.

Changes

We publish changes on this page and update the date above. If a change is significant, we will also tell you by email before it applies.

Contact

Marut Marutyan, Yerevan, Armenia. support@tenderscope.app