Privacy Notice

Applies to the TenderSource waitlist during the transition period · Last updated 18 August 2026

Scope of this notice

TenderSource is currently offline while it is rebuilt. During this period the only thing this website does is accept waitlist registrations. This notice describes that processing and nothing else — there are no accounts, no search, and no AI processing available at present.

A full privacy policy covering the product will be published before the new version opens, and will replace this notice.

Who is responsible

The controller for this processing is:

Raphael Santos Cavalcanti (TenderSource AI)
An den Grachten 3
55120 Mainz
Germany

Data-protection enquiries: privacy@tendersource.eu

What we collect, and why

  • What you type into the waitlist form — your name, your company name and your work email address. We use these solely to confirm your address and to tell you when access opens.
  • Confirmation record — the time you confirmed your address and the version of the consent wording shown to you. This is our evidence that you asked to hear from us.
  • Server logs — our hosting provider records technical data such as IP address, timestamp and requested URL, as part of operating and securing the site.

Legal basis

  • Consent (Art. 6(1)(a) GDPR) for the waitlist itself. You give it by confirming your email address, and you can withdraw it at any time by emailing us — we will delete your entry.
  • Legitimate interests (Art. 6(1)(f) GDPR) for server logs, in operating and securing the website.

Who else sees this data

  • Railway Corp. (United States entity; data stored in the EU, region eu-west) — hosts the application, the database and operational logs.
  • Resend — sends the confirmation email. It processes your email address and the message content.
  • Cloudflare (United States entity) — provides the bot-protection challenge on the sign-in page. If you open /login, your IP address and browser characteristics are transmitted to Cloudflare to distinguish you from automated traffic. It is not used on this page or on the waitlist form.

We do not sell your data, we do not share it with advertising networks, and no AI system processes anything you submit here.

How long we keep it

Until the new version launches and you have been invited, or until you ask us to delete it — whichever comes first. If the relaunch does not happen, we delete the waitlist.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format. You may withdraw consent at any time. To exercise any of these, email privacy@tendersource.eu.

You also have the right to complain to a supervisory authority. In our case that is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz; you may also contact the authority where you live or work.