Privacy Policy

1. Controller

The controller of your personal data is Kreatif Technology LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, Amerika Birleşik Devletleri. For any privacy question or request, write to [email protected].

2. Data we collect

• Account data — name, business email, password hash (handled by our authentication provider), company name and role.
• Company profile — the details you enter so tenders can be matched to you: sector, experience certificate groups, provinces of interest, capacity information.
• Content you create — saved tenders, cost estimates, quantity take-offs, progress payments and bid drafts.
• Billing data — subscription plan and status. Card details are entered on the payment provider’s own checkout and never reach our servers.
• Technical data — IP address, device and browser information, and log records generated when you use the Service.

3. Why we use it

• To provide the Service: authentication, tender matching, cost and document tools.
• To operate subscriptions, take payment and issue invoices.
• To send service messages such as deadline reminders and account notices.
• To keep the Service secure, diagnose faults and prevent abuse.
• To meet legal and accounting obligations.

4. Legal bases

We process data to perform our contract with you (providing and billing the Service), on the basis of our legitimate interests (security, fault diagnosis, product improvement), to comply with legal obligations, and — where required, for example for non-essential cookies — on the basis of your consent.

5. Processors and recipients

We do not sell personal data. We share it only with the providers needed to run the Service, each acting on our instructions, and with authorities where we are legally required to.

• Paddle.com Market Ltd. — payments. Paddle acts as Merchant of Record and is an independent controller for the transaction data it processes; see Paddle’s privacy policy.
• Clerk — user authentication and session management.
• Turso — managed database hosting for application data.
• Google (Gemini API) — AI features. Where you use tender analysis or bid drafting, the relevant tender text and the profile fields needed for the task are sent to the model to generate the result. We do not send payment data, and this content is not used by us to train models.
• Email delivery — for transactional messages such as reminders and account notices.
• Hosting and infrastructure — the servers and cache on which the Service runs.

6. International transfers

We are established in the United States and some of our providers operate outside your country. Where data is transferred internationally, we rely on the safeguards offered by those providers, such as standard contractual clauses, and transfer only what is needed to deliver the Service.

7. Retention

We keep account and content data for as long as your account is active. After you close your account we delete or anonymise it within a reasonable period, except where a longer period is required by law — for example invoices and accounting records, which are kept for the statutory retention term.

8. Security

Access is protected by authentication and role-based permissions, traffic is encrypted in transit, and each customer’s data is isolated by company. Access to production systems is limited to the people who need it. No system can be guaranteed absolutely secure, but we work to a standard appropriate to the sensitivity of the data.

9. Cookies

We use cookies that are strictly necessary for sign-in and security, and — with your consent where required — cookies that help us understand usage. Details and your choices are in our Cookie Policy.

10. Your rights

Depending on where you live, you may have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format and to withdraw consent. Turkish users additionally have the rights set out in Law No. 6698 (KVKK), explained in our KVKK notice. To exercise any of these, write to [email protected]; we respond within the period required by the applicable law. You also have the right to complain to your local data protection authority.

11. Children

The Service is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

12. Changes

We may update this policy. Material changes will be announced in the Service or by email, and the “last updated” date above will change.

13. Contact

Kreatif Technology LLC, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, Amerika Birleşik Devletleri. Privacy: [email protected] · General support: [email protected] · contact page. Related: Terms of Service, Refund Policy.