Privacy policy (draft for legal review)

Who we are

BidLink AI is operated by Reoncore Labs, Dhaka, Bangladesh ("we"). This policy explains what personal data we collect, why, and your choices. It is a draft prepared for legal review under the Personal Data Protection Ordinance/Act of Bangladesh and will be updated after that review.

What we collect

Account data: name, email, password hash, language preference, sign-in times and IP address.

Organisation data you enter: company profile (legal name, licences, turnover, experience, enlistments), team members and roles, tenders you upload or follow, documents you store, notes and tasks.

Lead data from the free assessment or contact forms: company, name, email, phone, sectors, districts and your message, with the consent text you accepted.

Technical logs needed to run and secure the service (request logs, error reports, audit events).

Why we use it

To provide the service you asked for: matching, eligibility analysis, checklists and notifications.

To secure the service: authentication, rate limiting, abuse prevention and audit trails.

To respond to your requests and, where you consented, to contact you about assessments and pilots.

We do not sell personal data and we do not use your documents to train AI models.

Where data is stored

Application hosting is on Vercel and the database is hosted by a managed PostgreSQL provider; both may be located outside Bangladesh. Transfers are protected by TLS. We will update this section with the exact providers and regions before launch.

Sharing

We share data only with the infrastructure providers needed to run the service (hosting, database, email delivery), under their data processing terms, and when required by law.

Members of your organisation can see the data in your workspace according to their role.

Retention and deletion

Account and workspace data is kept while your account is active. Organisation owners can request deletion from Settings; we delete within 30 days and confirm by email. Audit logs and invoices may be retained longer where law requires.

Lead data is kept for up to 12 months after the last contact unless you ask us to delete it earlier.

Your rights

You can access, correct and export your data, withdraw consent, and request deletion by writing to hello@bidlinkai.com or through the contact page. We respond within 30 days.

Cookies

We use strictly necessary cookies only: a session cookie for sign-in and a cookie that remembers your language. No advertising or cross-site tracking cookies.

Changes

We will post changes on this page with a new date. Material changes will be announced in the application.