Privacy & your data

Updated 1 November 2026. Public registration, checkout and general opportunity email remain closed during launch acceptance.

Who is responsible

Tenderspot is operated by ACE MEDIA LIMITED, company 08990041, the controller of the information described here. Our registered office is Office A16 Arena Business Centre, 9 Nimrod Way, Ferndown, Dorset, BH21 7UH, United Kingdom. Our correspondence address is Spaces Woking, One Woking, Woking, GU21 6BG. Email hello@tenderspot.co.uk or use Contact & support. These addresses do not offer walk-in support.

Accounts, membership and payments

We use your email, verification and security records, profile, workspace membership, selected plan, preferences and shortlists to provide the account and service you request. Where you subscribe personally or as a sole trader, this is needed to take steps at your request and perform your contract. Where an organisation subscribes and invites its personnel, we rely on legitimate interests in providing and administering the organisation’s requested service. Private acceptance testing uses our legitimate interest in developing and checking the service with authorised testers. Necessary account information must be provided to use private features; optional profile information can be omitted.

Supabase handles authentication. Email confirmation is required, and owner/staff accounts require MFA. We process session and security events to protect accounts and prevent misuse. Verification and recovery links expire and can be used only once. We do not disclose passwords or authenticator secrets to workspace managers.

Stripe processes subscription payments, billing details, invoices, refunds and the customer billing portal. Tenderspot stores the customer/subscription references, plan and seat quantities, payment state, relevant invoice totals and acceptance records needed to provide and reconcile membership. Full card details are handled by Stripe, not saved in Tenderspot’s database. We process required accounting and tax records under legal obligations. Cancellation stops renewal as described in the terms; it does not itself delete the account or required payment records.

Your profile, recommendations and team

Supplier and buyer profiles are separate. You can provide a professional name, organisation, business type, team size, location, website, description, services, preferred work types and project-budget preferences. Optional profile images are cropped to 256 pixels square and metadata removed; the normal upload does not retain the original file or filename. You can replace or remove the live image; earlier copies may remain temporarily in provider backups.

Recommendations use the service categories associated with your choices, preferred work types and comparable project budgets. A Freelancer’s first selection is made when eligible membership starts. Later profile changes apply to the next seven-day selection period and do not unlock an additional current selection. Selected opportunity IDs and the period’s preferences are recorded to enforce the five-pick allowance and explain your selection. Availability, archive and withdrawal rules still apply. Your description and team size are not used to rank opportunities, and profile information is not sent to the AI provider. Suggestions guide discovery; they do not decide whether you are eligible for employment or a contract.

When enabled for an eligible team plan, the workspace owner manages named seats and sees their own team’s email addresses, invitation/member status and seat usage. Members share the workspace shortlist but keep their own login and profile. An invitation records the intended address, inviting owner, expiry and acceptance/revocation history. It grants access only after the invited person signs in with that verified address and explicitly accepts. Invitations expire after seven days. Export records identify the workspace, exporting account, opportunity IDs and calendar month to enforce the shared monthly allowance. These team and export features remain subject to completion of launch acceptance before wider availability.

Email and your choices

Resend delivers account verification, password recovery and supported service messages from our verified sending domain. Stripe sends payment receipts and its billing messages. Delivery references and outcomes are retained for troubleshooting, security and avoiding duplicate messages. Optional opportunity emails depend on your recorded preference; use the unsubscribe control or contact us to stop them. Changing a profile does not itself subscribe you to promotional email. Withdrawal of consent, where consent is used, does not affect the lawfulness of earlier processing. Essential security, requested invitation and billing messages are separate from optional opportunity mail. General opportunity sending is currently closed following controlled acceptance tests.

Support, submissions and source information

The contact form and Dotty’s explicit Contact the team option save the name, email, topic, related reference, message and reply history you submit. Signed-in requests can include your account reference. Staff record status changes and private notes to investigate and respond, relying on legitimate interests; legally required rights and complaint responses rely on legal obligations. A secret private link allows a visitor to follow a request without an account. Keep it safe. Only its one-way hash is retained in the support database. A keyed hash of the network address helps limit spam. Support messages are not sent to an AI provider. Replies are currently read on the private request page; email reply notifications and incoming-email replies are not connected.

The private brief-submission form remains for fictional acceptance examples. A brief, commissioning organisation, review contact, application route, confirmations and account reference are kept in a private moderation queue. Contact addresses are not automatically published. Public submissions require completion of the separate intake and retention checks.

Opportunity facts come from original buyer/employer notices, official feeds and recorded specialist sources. Minimal professional contact information may be retained in private research where needed to verify a source, subject to a separate source and privacy assessment. Public availability does not remove privacy rights. Member summaries retain attribution and source links, and do not include unnecessary personal contact details or private research attachments. You can ask which source supplied information about you.

Website operation, statistics and storage

Cloudflare delivers and protects the website and processes connection information needed for delivery, abuse prevention and fault investigation. Our basis is legitimate interests in operating a secure, reliable service. The essential sign-in cookie lasts up to one hour and is protected from page scripts. Sign-out clears it. Account shortlists are stored in the workspace; illustrative public examples may use local browser storage.

Cloudflare Web Analytics supplies aggregate visits, page views, referring websites, countries, device types and performance measurements to improve public pages. It runs only on approved public pages while signed out, and is excluded from sign-in, registration, account and owner areas. Form contents, account details, opportunity records and Dotty messages are not sent to it. Cloudflare’s statistics do not use analytics cookies, local storage or fingerprinting to identify visitors, although delivery of the script and statistics still uses network connections. Where personal information is processed, our basis is legitimate interests in improving the service.

The visit-statistics control lets you object without losing access. Its essential preference cookie stores only the requested “off” choice for up to one year. Clearing cookies or using another browser removes that choice. We honour Global Privacy Control and Do Not Track. Aggregate statistics cannot be linked back to your account for individual deletion. We do not use advertising tags. External buyer websites have their own privacy practices.

Website statistics

We use Cloudflare Web Analytics to understand visits, page views, referring websites, countries, device types and page performance, so we can improve Tenderspot. This is aggregate service improvement, not advertising, account profiling or identifying individual people. The analytics beacon runs only on public pages while you are signed out. It is excluded from sign-in, registration, account and owner areas. We do not pass form contents, account details, opportunity records or Dotty messages to it.

Cloudflare does not use analytics cookies, local storage or fingerprinting to identify visitors. Its infrastructure still receives the connection needed to deliver the script and statistics. See Cloudflare’s analytics information. Our purpose is improving the service; where personal information is processed, we rely on legitimate interests in understanding and improving it.

Use the visit statistics control below to object at any time, without charge or loss of access. Turning statistics off reloads the page and stops further collection in this browser. We store that requested choice in an essential preference cookie for up to one year; it contains only “off”. Clearing cookies or using another browser removes the choice. We also honour Global Privacy Control and Do Not Track. Turning statistics back on cannot override those browser settings. Aggregate statistics already collected cannot be linked back to your account for individual deletion.

Dotty and AI

Website help is available to everyone. Eligible signed-in Founder, Agency and Growth members can request OpenAI-powered help with applications, bids and proposals. Before an AI request, you confirm that the message contains only public facts or fictional placeholders. The request includes that message and, if selected, a limited public opportunity summary. We do not send your profile, photos, files, private research or previous conversation. Do not submit confidential documents, personal contact details or credentials.

Tenderspot does not save AI questions and answers. The messenger holds up to 24 bubbles in the current tab; reloading or starting a new chat clears them. Requests use store:false, but provider abuse-monitoring records can still apply: this is not a zero-retention promise. We record account, request reference, time and reserved allowance to enforce usage limits and prevent repeated charges. The shared AI service allowance and per-account limits shown in the interface apply. Review all output yourself. Dotty does not submit applications or make solely automated decisions with legal or similarly significant effects about you.

Providers and international processing

Our providers include Supabase for Auth/database, Cloudflare for delivery/security/statistics, Stripe for payments, Resend for email, Google Workspace for business correspondence and private operational documents, and OpenAI for explicitly requested AI assistance. Providers receive the information necessary for these functions. Authorised staff and professional advisers may access relevant records when needed for support, accounting, security or legal obligations. We may disclose information where required by law. We do not sell your personal information.

The project database is configured in Ireland. Provider operations, subprocessors and support may involve countries outside the UK or Ireland; the database region does not mean every processing operation stays there. Before wider public intake, we are completing the record of applicable supplier agreements, transfer destinations and UK transfer safeguards. Contact us for the available provider and safeguard information. This outstanding documentation is a launch acceptance item, not a claim that its review is complete.

Retention and your rights

We keep account and service records while needed for authorised access, support, security, accounting and resolving disputes. We assess the purpose, sensitivity, continued relevance, legal duties and outstanding claims when deciding when to remove or anonymise information. Resolved support requests are reviewed after 12 months; this is a manual review, not an automatic deletion promise. Invitation, delivery and security evidence is retained only as needed for access control, abuse prevention, troubleshooting and disputes. Accounting records follow applicable legal retention requirements. A 12-month opportunity archive is not blanket permission to retain personal data for that period. Backup and research retention schedules remain separate pre-launch review items.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to legitimate-interest processing and withdraw consent where used. Contact hello@tenderspot.co.uk; a paid account is not required. We normally respond within one month, subject to lawful identity checks, clarification and permitted extensions. You can raise a complaint through Contact & support or with the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. We will explain significant changes to how we use your information before a new purpose starts.