Privacy Policy

govrider matches live European government tenders, RFPs, grants, and framework agreements to a cybersecurity company's exact technical profile, and pairs every opportunity with the regulatory and commercial context a team needs to qualify and compete. We work with cybersecurity vendors, MSSPs, consultancies, and integrators selling into the European public sector.

For privacy-related queries, contact us at contact@govrider.ai.

Account data: govrider is invitation-only. There is no public sign-up: we sign a service agreement with your organisation, then provision a login for each seat you assign. We collect the name, work email, and role of each seat. Authentication is handled by Supabase Auth; passwords are hashed by our authentication provider and we never see or store them in plain text.

Usage data: We record how your team engages with the opportunities and dossiers in your feed, such as which ones are opened, read, voted on, or pushed to your CRM. We use this to keep your organisation's matches relevant and to answer support requests about your account.

Documents: Where a tender pack is released only to registered bidders, your team can upload it so we can build the dossier against it. Uploaded documents are stored against your organisation only and are never shared outside your seats.

Billing data: Subscriptions are annual, billed per organisation by seat count. We hold your organisation's billing contact and invoice records to administer the subscription and for accounting purposes.

Session cookies: We use HTTP-only session cookies set by Supabase to keep you logged in across page loads. These are strictly necessary for the service to function. We do not use advertising or tracking cookies.

We use your data solely to provide and improve govrider:

• Authenticate you and maintain your session.
• Deliver and personalise the feed of opportunities matched to your organisation.
• Administer your organisation’s subscription and seats.
• Improve match relevance based on how your team engages with your feed.
• Respond to support requests you send us by email.

We do not sell your data, use it for advertising, or share it with third parties except as described in Section 4.

We share personal data only with the following categories of trusted third-party service providers, solely to the extent necessary to deliver the service:

Authentication & database provider: Stores your account data, usage data, and uploaded documents securely on our behalf. Data is hosted on cloud infrastructure within the EU.

Cloud hosting provider: Runs and serves the application. May log standard request metadata (IP address, request path) for operational and security purposes.

Your organisation's account data and uploaded documents are retained for as long as your subscription is active. Invoice records are retained for accounting and dispute-resolution purposes.

If your organisation's subscription ends and you request deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g. financial records).

If you are in the UK or European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erasure ("right to be forgotten"): request deletion of your data.
• Portability: receive a copy of your data in a machine-readable format.
• Object to processing where we rely on legitimate interests.

To exercise any of these rights, email us at contact@govrider.ai. We will respond within 30 days.

We use industry-standard practices to protect your data: HTTPS for all connections, HTTP-only session cookies, server-side-only access to service credentials, and row-level security on our database. No system is 100% secure. If you believe your account has been compromised, contact us immediately.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy.