Privacy Policy

TenderWatch (operated by Deep Forest Lab Pte Ltd) | Version 1.1 | Effective Date: February 5, 2026
Last Updated: February 5, 2026

1. Introduction

Deep Forest Lab Pte Ltd ("we", "our", or "us") operates the TenderWatch mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

By using TenderWatch, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, we collect:

Account Information: Email address and display name from your Google or Apple sign-in
Profile Information: Company capabilities and qualifications you choose to provide for tender matching
Preferences: Your notification settings, industry preferences, and app settings
User Activity: Tenders you bookmark, view, or mark as read

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

Device Information: Device type, operating system, and unique device identifiers for push notifications
Usage Data: App features accessed, time spent, and interaction patterns
Log Data: IP address, access times, and error logs for troubleshooting

2.3 Information from Third Parties

Authentication Providers: When you sign in with Google or Apple, we receive your email address and basic profile information as authorized by you

3. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Legal Basis (GDPR)
Provide and maintain the Service	Contract performance
Authenticate your identity	Contract performance
Send push notifications about matching tenders	Consent / Legitimate interest
Personalize tender recommendations	Consent / Legitimate interest
Analyze tender documents using AI services	Legitimate interest
Improve and optimize our Service	Legitimate interest
Respond to your inquiries and support requests	Contract performance
Comply with legal obligations	Legal obligation

4. AI and Automated Processing

AI Disclosure: TenderWatch uses artificial intelligence services (including large language models) to analyze tender documents and extract submission requirements. This processing is performed on publicly available tender documents only, not on your personal data. The AI analysis helps us provide you with structured information about tender requirements, certifications, and qualifications needed.

Our AI processing:

Analyzes publicly available tender documents from government sources
Does not process your personal information or profile data
Is used to improve the accuracy and usefulness of tender information

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We use third-party services to operate our platform:
- Google Cloud Platform (hosting and infrastructure) - Singapore region
- Firebase by Google (authentication, database, analytics, push notifications)
- Anthropic (AI document analysis) - processes only public tender documents
- RevenueCat (subscription management, if applicable)
Legal Requirements: We may disclose information if required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

5.1 Third-Party Data Protection

All third-party service providers we work with are contractually obligated to:

Provide the same or equivalent level of data protection as described in this Privacy Policy
Process your data only for the purposes we specify
Implement appropriate security measures
Notify us of any data breaches

We do not share your personal data with advertisers or marketing companies.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:

Account Data: Retained until you delete your account
Activity Data: Retained for 2 years from the date of activity
Log Data: Retained for 90 days

After account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS)
Encryption of data at rest
Access controls and authentication
Regular security assessments
Secure cloud infrastructure with industry certifications (SOC 2, ISO 27001)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 For All Users

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and data
Data Portability: Request your data in a portable format
Opt-out: Disable push notifications or marketing communications

8.2 Additional Rights for EU/UK Users (GDPR)

Restriction: Request restriction of processing
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time
Lodge Complaint: File a complaint with a supervisory authority

8.3 How to Exercise Your Rights

Account Deletion: You can request deletion of your account and all associated data at any time:

In-App: Go to Settings > Account > Delete Account
Web Form: Visit pub.tenderwatch.lol/delete-account
Email: Contact privacy@deepforestlab.com

For data access, correction, or portability requests, please email us at privacy@deepforestlab.com. We will respond within 30 days (or sooner as required by applicable law).

9. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including Singapore (our primary location) and the United States (where some cloud infrastructure operates).

When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant authorities
Data processing agreements with our service providers
Adequacy decisions where applicable

10. Children's Privacy

TenderWatch is a business-to-business service not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a person under 18, please contact us immediately and we will delete it.

11. Push Notifications

With your consent, we may send push notifications about:

New tender opportunities matching your preferences
Tenders closing soon that you've bookmarked
Award announcements for tenders you're tracking

You can disable push notifications at any time through your device settings or within the app under Settings > Notifications.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new Privacy Policy on this page with an updated "Last Updated" date
Sending you a notification through the app for material changes
Requesting your consent again where required by law

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Deep Forest Lab Pte Ltd
(Operating as TenderWatch)

Email: privacy@deepforestlab.com
Website: https://tenderwatch.lol
Account Deletion: pub.tenderwatch.lol/delete-account

For Singapore PDPA inquiries, we aim to respond within 30 days.
For EU GDPR inquiries, we aim to respond within one month.