Privacy policy
1. Data controller
ИНСАЙДМАПС БЪЛГАРИЯ ЕООД, Company No. 205550879, Граф Игнатиев, ул. 44-A, етаж. 4, 1000 Sofia, Bulgaria. For questions and requests about personal data, use the contact form.
2. What data we process
- Profile data: name, email, password (stored only as an irreversible hash), language and alert settings.
- Company data: name, company number, sectors, regions, price range and a description of the business, which you enter yourself.
- Usage data: saved searches, saved tenders, alerts sent.
- Technical data: IP address and time of the request in the server logs, for security and protection against abuse.
- Visit statistics: which pages you open, where you come from, country, device and browser, without cookies; the IP address is kept for 30 days, and if you are signed in, the visit is linked to your profile (legitimate interest: security and improving the service).
- Messages: what you send us through the contact form, and our replies.
- Billing data: company, company number, VAT number, address and responsible person, which you enter for pro forma invoices and invoices; payments and promo codes used.
- Activity: on which days you signed in to your profile (without details of what you looked at), to improve the service.
- Two-step sign-in: if you turn it on – a secret key, stored encrypted, and the backup codes as an irreversible hash.
3. What we use it for
- To provide the service: sign-in, saved searches, alerts, match score (performance of a contract).
- For security and the prevention of abuse (legitimate interest).
- For issuing pro forma invoices and invoices and for accounting (legal obligation).
- For support: at your request the team may view your dashboard in read-only mode; every such view is logged.
- For product news, only if you have given consent. You can withdraw it at any time in the settings.
4. Artificial intelligence
The tender summaries are produced with Anthropic's service from the public notices and documents. When you use the match score, the description of your company's business is sent to the service, without the name, email or any other data of the person using the profile.
5. Data from public registers
The site shows public information about buyers and about companies that have signed public procurement contracts: name, company number, subject and value of the contract. We do not store or show the names, emails and phones of the contact persons in the notices, nor identifiers of individuals.
If you believe the site shows your personal data, write to us and we will remove it.
6. Cookies
We use only necessary cookies and – with your consent – preference cookies. We do not use advertising cookies or third-party tracking. The full list is in the Cookie policy.
7. Retention period
- Profile data is kept as long as the profile exists. After the profile is deleted, it is removed within 30 days.
- Server logs are kept for up to 8 weeks.
- Invoices and the data in them are kept for 10 years under the Accountancy Act, including after the profile is deleted.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can delete your profile yourself and download a copy of all your data from the “Account” page. We answer requests within one month. You have the right to complain to the Commission for Personal Data Protection.