Privacy Policy
Draft for legal review — last updated 22 May 2026. This policy is mirrored to the `/privacy` page. Items in square brackets must be confirmed before publication.
10ender is a bid co-pilot that helps UK cleaning businesses find, match and draft public sector tenders. This policy explains what personal data we hold, why, and the choices you have. We have written it in plain English on purpose — if anything is unclear, email us.
Who we are
10ender is operated by [10ender Ltd, company number CONFIRM], registered at [CONFIRM address]. We are registered with the Information Commissioner's Office under registration number Z3174802. For data protection questions, contact our data protection lead at [privacy@10ender.com — CONFIRM].
We are the "data controller" for the account and usage data described below. Where you enter data about other people — for example staff named in a case study, or TUPE transfer information — you are the controller for that data and we process it for you.
The data we hold
Account data. Your name, email address, role, and the company you work for.
Your company profile. The business information you build up as you use 10ender — accreditations, insurance, policies, financial records, case studies, key people, and operational details. This is reused across your bids so you do not re-enter it each time.
Bid data. The tenders you work on, the drafts you and the co-pilot produce, your pricing, and any TUPE or social value information a tender requires.
Usage data. Which tenders you have seen, your match preferences, and basic product analytics that tell us how the service is used.
Technical data. Sign-in records, security and audit logs, and error reports.
We do not ask for special category data (such as health data). Please do not enter more TUPE detail than the tender actually requires.
Why we use it and our lawful basis
We use your data to provide the service: to match tenders to your business, to help you draft bids, and to manage your account and billing. Our lawful basis for this is performance of our contract with you.
We also use limited data to keep the service secure, to understand how it is used, and to improve it. Our lawful basis for this is our legitimate interests in running a safe, reliable product. You can object to this — see "Your rights" below.
We never auto-submit a bid to a buyer. You are always the author and you always sign off before anything leaves 10ender.
Who we share it with
We use a small number of trusted service providers ("processors") to run 10ender. They may only use your data on our instructions:
- Supabase — our database, sign-in and file storage (EU region).
- Anthropic — the AI service that powers drafting and analysis. It is
configured so your content is not retained or used to train models.
- Stripe — subscription payments. Card details are handled by Stripe,
not stored by us.
- Resend — sending service emails.
- Vercel and Railway — hosting the website and background jobs.
- Sentry, PostHog and Better Stack — error tracking, product
analytics and uptime monitoring.
We do not sell your data, and we do not share it with buyers or anyone else except as described here or where the law requires it.
Sending data outside the UK
Some of our providers — including Anthropic — process data in the United States. Where data leaves the UK we rely on the UK's International Data Transfer Agreement or Standard Contractual Clauses with the UK Addendum, so your data keeps an equivalent level of protection. [CONFIRM all processor agreements are signed before launch.]
How long we keep it
We keep your account data for as long as your account is open. If you ask us to delete your account, we start a 30-day countdown — this gives you time to change your mind or export your data — and then we permanently delete it. Operational logs are kept for shorter periods. Deletions also work through our backups as those backups age out [CONFIRM backup window].
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data (you can also export it yourself at any
time);
- correct anything that is wrong — most of it you can edit directly in
the app;
- delete your account and data;
- restrict or object to certain uses of your data.
To export your data or delete your account, use the in-app controls or email [help@10ender.com]. We will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we would rather you came to us first so we can put things right.
Cookies
10ender uses only the cookies needed to keep you signed in and to keep the service secure. [CONFIRM whether any analytics cookies are used and update this section accordingly.]
Changes to this policy
If we change this policy we will update the date above and, for significant changes, tell you in the app or by email.
Contact
Email [privacy@10ender.com — CONFIRM] with any privacy question or request.