Legal & privacy
Understand information limits, service terms and how your information is handled.
Reviewed 2026-10-06 · Version 2026-10-06
Disclaimer and service boundaries
TenderLuma is an independent procurement information and research service. It is not a procurement authority, tendering agent or official bid submission portal. An organization's name, logo or official link does not imply its authorization, partnership or endorsement.
Summaries, classifications, scores, translations, currency conversions, deadlines, alerts and drafts may contain omissions, errors or delayed updates. Listing a source does not establish complete coverage or real-time synchronization. Check the authority's official documents, attachments and amendments, especially time zones, eligibility, submission methods and final deadlines.
Automated or AI-assisted features, where offered, support research and drafting. They do not replace human review or provide legal, tax, investment, export-control, sanctions or compliance advice. Verify prices, evidence, qualifications and references before using outputs in a bid or business commitment.
TenderLuma does not guarantee tender eligibility, approval, business opportunities or an award. External websites have their own terms and privacy practices. This notice does not exclude or limit liability that cannot lawfully be excluded, or reduce mandatory rights under applicable law.
Terms of Service
These terms cover the TenderLuma website, accounts, workspaces and related support. Anyone acting for an organization must have the necessary authority. Signed orders or specific agreements may define scope, fees and enterprise requirements and take precedence as agreed, subject to mandatory law.
Use the service for lawful internal business research within your account, plan and seat permissions. Protect email access, login links and credentials, manage member permissions and report suspicious access. Do not share or sell credentials, bypass access controls or quotas, attack systems, upload malicious content or infringe privacy, intellectual property or other rights.
You retain the relevant rights in submitted materials and must be authorized to upload and process them. We need to store, process and display content to provide the features you choose. Submit only necessary information; avoid state secrets, unauthorized confidential business materials and unnecessary sensitive personal data. Check permissions and data scope before sharing, exporting or restoring a backup.
Trial scope, prices, currency, taxes, billing periods, automatic renewal and cancellation rules are those clearly displayed and confirmed when you order. Check them before paying. Manage subscriptions through the available billing interface or contact support about cancellation and refunds. This page does not restrict refund rights under applicable law or a valid order.
We may proportionately restrict affected features for security incidents, unlawful use, non-payment or material breach and explain the reason and available remedies where law and security permit. Maintenance or third-party failures may interrupt service; service-level commitments apply only when expressly agreed. Stopping use does not automatically delete workspace data; see the privacy policy.
Material changes to rights, obligations or personal-data processing should be communicated appropriately, with renewed acknowledgement or consent where legally required. Contact support to seek a resolution of disputes. Applicable law and the competent forum follow valid agreements and relevant law; this page does not impose an unconfirmed jurisdiction, arbitration clause or universal liability cap.
Privacy Policy
This policy explains information handling when you use TenderLuma. Account and service information may include email, name, role, login identifiers, company details, workspace members and permissions, target markets, support requests and business enquiries you submit. We use it for accounts, collaboration, support and related services, under the basis required by applicable law. Optional analytics has a separate choice.
When you use the public contact form, your name, reply email, category, subject and message are sent through the mail service to the operator's inbox to handle your request. Sending and receiving email providers also process the content and delivery records. Avoid unrelated sensitive information; form acknowledgement does not subscribe you to marketing emails.
Business information includes saved items, monitors, pipelines, tasks, notes, contacts, imported private text and backups. When the relevant features are used, it may also include qualifications, project experience, financial or compliance statements and bid drafts. Library imports store text, file names and relative paths within selected directories. Restore previews send the selected backup to the server; preview expiry does not mean immediate deletion.
Contact images and QR codes are recognized in your browser. Recognition components may load from a third-party CDN, so this is not a fully offline process. Confirmed contact fields and notes are sent to the server when saved. Camera use requires choosing the feature and granting browser permission, which you can revoke. This does not mean other upload features process everything locally.
We record certain page, product, audit and error events to understand usage, troubleshoot problems and protect the service. Records may include session, account or workspace identifiers, page or module names and limited event properties. Public source and campaign attribution uses limited categories. Servers may also process request addresses for abuse prevention. These records should not be treated as categorically anonymous.
Supabase provides authentication, database and related services. Login emails use the configured Supabase Auth or Resend channel. Where payment is enabled, Stripe handles hosted checkout and payment information; the platform receives plan, billing and payment-status information. Hosting and content delivery services also process necessary network requests. Google Analytics loads only when configured and allowed by you, as described below.
Service providers may process information outside your country. Contact support for actual processing locations, recipients and applicable arrangements. This page does not claim that all data stays in one country or that a particular cross-border certification has been obtained. Processing requiring separate notice, consent or other legal steps must meet those requirements first.
Retention should be limited to the period reasonably necessary for service delivery, security, handling requests and applicable legal obligations. Account, business, support, security and billing records may have different periods; legal holds or disputes may require continued retention. Cancellation, clearing browser storage or expiry of a preview link does not automatically delete all server records. You may request details of retention and deletion arrangements, including backups.
Where applicable law provides these rights, you may request access, correction, export, deletion, restriction or objection, or withdraw consent to consent-based processing. Use the contact-page form or a Security and privacy ticket in workspace Customer support, identifying the account, workspace and information concerned. We need to verify identity and authority and handle and explain the outcome under applicable requirements. Product backups cover only the listed categories and do not replace a full data-rights request.
The service is intended for authorized adult business users, not children. Contact support if information about children or other sensitive information has been submitted without appropriate authority. Declining optional Google Analytics does not prevent basic browsing or account use.
Cookies, browser storage and analytics choices
Browser storage holds sign-in state, language, workspace selection, interface preferences, some cached business state and analytics choices. Session storage also holds short-lived session identifiers and source categories. Some information may remain after a tab closes. Clearing it through your browser can sign you out or remove local preferences, but does not delete server-side account or business information.
Google Analytics is a separate optional analytics service. It loads only if enabled on the site and you allow it. Current settings disable advertising storage, ad personalization and Google Signals. Change your choice through Privacy settings, or decline the initial prompt. Withdrawal updates the consent state; it does not mean previously sent data is deleted, a loaded script is immediately removed or existing cookies are automatically cleared.
Declining Google Analytics does not stop the first-party product, audit, security and error records described above. Reading this policy or accepting service terms does not enable Google Analytics, authorize marketing or amount to consent to every possible processing activity. Contact support with any objection to a particular activity.
Data use, copyright and corrections
Rights in notices, authority records, award information and linked materials remain with their respective rights holders. Organizing or displaying them does not give TenderLuma ownership of the original documents. Public availability does not imply unrestricted republication, bulk access or commercial resale. Follow source licences, access conditions and applicable law, including attribution requirements.
An indexed source, planned sync or research entry indicates a recorded item, not authorization for bulk processing, successful synchronization or confirmed bidder eligibility. Restricted material may be used only within actual permissions; platform access does not grant additional rights in source material.
To report inaccurate, outdated, privacy-sensitive or allegedly infringing material, provide the page or record link, the issue, a corrected source or necessary evidence of rights, and a reply contact. Do not send passwords, complete identity documents or unrelated sensitive materials. We will review and, as appropriate, correct, add attribution, restrict display or remove material. Corrections to an original notice must still be addressed to its publisher.
Security and enterprise arrangements
The product uses authentication, workspace roles, server-side permissions and records of key actions. No system can guarantee absolute security or uninterrupted availability. This page is not an independent security certification, fixed response-time promise, deletion certificate or SLA. Enterprise customers may request security information, data-processing terms and service-level commitments before contracting and confirm what is actually available.
Report security issues using the contact below, with the affected page, time and reproduction steps, and redact screenshots. Do not disclose access tokens, other people's information or material enabling further attacks, or demonstrate a problem through unauthorized access or destruction of data.
Contact and requests
Service name: TenderLuma. Submit privacy, correction, copyright, security or terms requests through the contact page or workspace Customer support. The public contact address is support@tenderluma.com. Provide only what is needed to handle the request; do not send passwords, access tokens or complete payment details.
The Chinese and English versions are intended to convey the same meaning. Contact us to clarify translation differences, which should not reduce statutory rights. The review date identifies this text; previous acknowledgements retain their corresponding versions.
Send a request