Your documents and data

• Public tender documents only. TenderScreen is for public tenders. If a document carries a restriction marking (for example NATO RESTRICTED, VS-NfD or "dienesta vajadzībām"), the app refuses to analyse it.
• What you upload stays yours. Documents you upload, and the analysis made from them, are visible only in your account. Your answers, owners and statuses are stored per account.
• Where your data is. Our server is in Helsinki, Finland, at Hetzner (EU). Every connection to TenderScreen is encrypted (HTTPS). The data is backed up every night on the server and, encrypted before it leaves, to a second Hetzner site in Falkenstein, Germany.
• The AI analysis. For the analysis, the documents' text goes to Anthropic's API (USA). Under Anthropic's commercial terms it is not used to train models and is deleted within 30 days. No account data goes with it.
• Payments. You pay on Stripe's payment page. The card number goes to Stripe and never reaches our server; we receive your company details for the invoice.
• Sign-in. Passwords are stored only as a salted one-way hash (PBKDF2, 240,000 rounds). A new account confirms its e-mail with a 6-digit code, and our e-mails never contain a link to sign in. After repeated wrong passwords, sign-in pauses for 15 minutes.
• Who else handles your data. Hetzner (hosting and backups), Anthropic (analysis), Stripe (payments), Resend (e-mail), Cloudflare (forwarding mail to our contact address) and Google Fonts (our page fonts). We do not sell your data. The full list with the legal basis is in the privacy notice.
• Deleting your data. Write to hello@tenderscreen.com and we delete your account, your answers and uploads, and remove your e-mail from our usage records. Purchase records stay, without your e-mail, because accounting law requires them. Backups roll over within 6 months. We answer within 30 days.

The full privacy notice is in the terms.