Privacy

Service operator and privacy contact

TenderCue Australia is a registered Australian business name used by an Australian sole trader, ABN 74 506 855 373. Privacy and support enquiries may be sent to support@tendercue.com.au.

Current product status: document extraction and tender checks run in your browser. Uploaded file bytes and filenames are not retained by TenderCue. If you sign in, your self-declared business profile, saved public opportunity data, matching rules, analysis results, response plans, reviewed Evidence Vault text and Bid Studio work you explicitly choose to save can sync to your TenderCue account.

Public test-release status

The public website provides free and paid access under the current Pricing and Terms pages. Account records remain private to the verified signed-in user. Background email alerts operate only when the named providers are connected, the feature is enabled and the account explicitly opts in.

Information you provide

You may provide tender text, documents and business information to use the service. Uploaded file bytes and filenames, tender text you do not explicitly save as an Evidence Vault record, unsaved analysis and unsaved response plans stay in the current browser tab or session and are cleared when that tab or session ends. If you choose to sign in after analysing a tender, the bounded result—including extracted tender phrases—is held temporarily in browser session storage only to carry it through sign-in; it is not synced to your account unless you approve the confirmation dialog. A business profile, analysis result or evidence record is stored in your account only when a signed-in user explicitly chooses to save it.

Free setup-review requests

If you request a free setup review, TenderCue stores the capability or service description, selected region, reply email, consent time and delivery status you submit. The form has no document-upload facility and must not be used for confidential tender material, credentials, payment details or unnecessary personal information. The details are used only to assess and respond to that request. Resend receives the configured support destination, an opaque lead reference, the receipt time and a link to TenderCue’s protected operator register; the submitted answers and reply email are not placed in the notification. Only a user signed in with TenderCue’s separately configured operator identity can open the register. You may ask the privacy contact above to delete a request sooner.

Opportunity sources and alert imports

The opportunity desk retrieves public AusTender metadata through TenderCue’s server and links back to the official listing. Bounded public feed records may be cached for up to 14 days so matching can continue through short source outages; cached results are labelled with their retrieval time and still require verification on AusTender. TenderCue records source refresh times, item counts and bounded technical failures so outages can be detected without recording portal credentials. Alert emails and TXT, MD, CSV, TSV, JSON, XML, RSS, EML or HTML files you manually import are organised inside your browser and are not retained. Imported links are activated only when they use a recognised Australian government procurement domain. A secret-protected production import endpoint can accept bounded official state or territory exports for matching; it retains only validated public opportunity fields and never portal passwords or the original uploaded export.

Secure account sign-in

Sign-in is completed by the hosting authentication layer or a time-limited email link. When email-link sign-in is used, TenderCue sends the entered address to Resend solely to deliver that security email; Resend may process delivery and link-request telemetry under its provider terms. TenderCue receives the verified email address and, when available, a display name, but never receives or stores your email-account password. The verified email is normalised and converted to a one-way identity hash so TenderCue can find the same internal random account identifier on another device. Normal account screens show a masked address, and the email and display name are not stored in TenderCue’s application database in this release.

Saved opportunity workspace

Saved opportunity identifiers, titles, validated official links, closing details, public summaries, review status, bid decision and decision note are stored against your internal TenderCue account identifier. They are available on devices where you use the same verified email sign-in and are included in your data export. Do not put confidential tender material or personal information in a decision note. Removing a saved opportunity deletes that record and detaches it from linked analyses or response plans; it does not silently delete those separately saved outputs. The Workspace never stores tender documents or pasted tender text.

Business profile

If you save a profile while signed in, TenderCue stores the business name, selected industry, capability summary and your yes-or-no statements about an ABN, insurance, cyber or information-security policy and project references. These fields are linked to the same internal account identifier and sync across devices. TenderCue does not verify these statements or store policy documents, insurance limits or expiry dates. Do not enter confidential tender material or personal information in the profile. You can remove the profile without deleting the rest of your account.

Evidence Vault

The Evidence Vault is a structured text register, not a document-storage service. You can type or paste evidence text, or select a PDF, DOCX, TXT, MD or CSV file for local browser extraction. TenderCue does not receive or store the selected file bytes or filename. Extracted text is placed into the form for your review and is not sent to TenderCue until you tick the authorisation confirmation and save. A saved record contains its category, title, optional summary and source label, the approved text, optional expiry or review date, your future-AI permission marker, and created and updated times. The permission marker is only a stored preference: this release does not connect to or send Evidence Vault content to an external AI service. Evidence records are linked to your internal account identifier, included in your export and individually editable or deletable from your account. Save only concise, non-sensitive excerpts you are authorised to retain and reuse. Remove names, contact details, policy or account numbers, credentials, government identifiers, health information and commercially sensitive specifics before saving.

Bid Studio

When you create a Bid Studio workspace, TenderCue stores the selected saved-analysis link, bounded criterion text, compliance status, optional weighting, word limit, internal owner, due date and note, links to current Evidence Vault record identifiers, and any response draft you explicitly save. It also stores transparent rule-based review scores and findings. The guided structure is a fixed template and the review uses visible heuristics; this release does not send criterion, evidence or draft content to an external AI service. Deleted or expired evidence no longer counts in future reviews, and changing or deleting linked evidence moves affected work back to review. Bid Studio does not provide an immutable evidence audit trail, verify claims, make a buyer decision or predict an award. Workspaces remain until you delete them individually or delete the TenderCue account.

Analysis Library

Nothing is saved merely because you run an analysis. When you choose Save analysis, TenderCue stores the name you provide and the result shown at that time: score, recommendation, detected deadline and values, extracted mandatory conditions and response items, cautions, truncation indicators, analysis version, and created and updated times. When official source context is present, TenderCue also stores a validated copy of that public link; if the opportunity is already in your Workspace, it stores that saved-record identifier too. This lets related work appear in one tender case. These fields can contain short wording copied from the tender. TenderCue does not store the uploaded file, its filename, the full pasted text, your business-profile match labels or response-plan progress. Save only results you are authorised to sync. You can rename or permanently delete each saved result.

On-site matching rules

Rule names, included keywords, excluded keywords and active state are stored against the same internal account identifier. They are compared with current public AusTender feed items when you open the Alert Centre. Email delivery is not active until the delivery provider, verified sending domain, signed unsubscribe service and delivery-event webhook are all connected. When it is available and you explicitly opt in, TenderCue stores your verified sign-in email while alerts remain enabled and sends bounded daily or weekly match digests through Resend. Every digest includes a signed one-click unsubscribe link. Verified bounce, spam-complaint or provider-suppression events automatically turn delivery off, remove the stored delivery address and cancel pending messages. TenderCue stores the provider event identifier, event type, message identifier and a one-way recipient hash for up to 90 days to deduplicate and investigate delivery events; it does not retain the address in that event log. TenderCue does not access your mailbox.

Response plans

When you explicitly choose Save plan to account, TenderCue stores the plan name, detected deadline, checklist wording and completion markers. If the plan was created from linked work, it also stores the owned opportunity and analysis identifiers plus a validated copy of the public official link. You can later edit the plan fields and completion markers; ordinary checklist editing does not change the source association. The most recently saved version syncs to your account. Unsaved editor changes may be staged temporarily in the current browser tab session to prevent loss during navigation, but they are not synced to your account until you select Save changes. These fields can contain short phrases derived from a tender. The uploaded file and full pasted tender text are not stored. Do not enter confidential or personal information in plan names, deadlines or checklist wording. You can download or delete each plan, include it in your data export, or remove it through account deletion.

Bid/no-bid scorecards

When you save a scorecard inside a tender case, TenderCue stores five user-selected ratings from zero to five, an optional assessment note, and the identifier of the saved opportunity it belongs to. Scorecards sync to your account and are included in your data export. They are your internal planning judgements, are not verified by TenderCue and do not contain or replace the tender pack. Keep confidential and personal information out of the optional note.

Optional import of earlier browser data

An earlier test release stored saved opportunities and matching rules against a pseudonymous browser cookie. If such data is found after you sign in, TenderCue shows the number of records and asks before moving them into your account. It is never claimed automatically. Imported data is deduplicated and the old cookie is expired when no browser-only records remain.

Retention and abuse protection

Free setup-review requests become eligible for automatic deletion 180 days after submission. Business profiles, saved opportunities, matching rules, saved analysis results, response plans, bid scorecards and Evidence Vault records may be deleted after 12 months without an update. An unused internal account record may then also be removed. Unsent queued notification items become eligible for deletion after 30 days; sent, failed or canceled queue records, delivery-event audit records and delivered billing-conversion records become eligible for deletion after 90 days. An undelivered billing-conversion record becomes eligible for deletion after 12 months. Short-lived incomplete checkout-attempt records are removed after expiry. TenderCue keeps a one-way hashed, short-lived connection or account signal to limit automated database abuse. It becomes eligible for deletion after 48 hours and is removed during later service maintenance. The daily alert process and later account changes run this retention cleanup. These records are used only for service delivery and security, not advertising or cross-site tracking.

Information we do not request

Do not upload or save passwords, payment card details, private keys, health information, unnecessary personal information, trade secrets you are not authorised to retain, or documents and text you are not authorised to use.

Plans and billing

Free TenderCue access does not require a card. One 14-day free trial is available per TenderCue account, on its first paid-plan subscription through Stripe-hosted checkout. Stripe collects the payment method for the subscription that starts automatically after the trial unless it is canceled first. Later subscriptions on the same account begin paid billing immediately after confirmation in Stripe. TenderCue does not collect or store payment-card details. It stores only the provider customer and subscription identifiers, plan state and renewal status required to control paid access; card details remain with Stripe. Current paid-plan prices are in Australian dollars and include GST. Stripe-hosted checkout collects the billing location and applies TenderCue’s configured inclusive Australian GST rate, so GST is itemised on subscription invoices without being added on top of the advertised monthly price. Your data export includes only the user-facing access status; it does not expose provider customer or subscription identifiers.

Account and future services

You can download a copy of your business profile, saved public opportunity details, matching rules, saved analysis results, response plans, Evidence Vault records and Bid Studio workspaces; remove the business profile by itself; delete individual saved items, rules, analyses, plans, evidence records and bid workspaces; or permanently delete all TenderCue account data from the Account page. Deleting TenderCue data does not delete or change your email account. Do not place confidential or personal information in profile fields, saved titles, summaries, source labels, matching rules, response-plan deadlines or checklist wording.

Optional analytics and advertising measurement

TenderCue asks before loading optional measurement tags. Analytics only sends Google Analytics page visits and bounded product events such as completing an analysis, viewing pricing or starting checkout. Analytics + ads may also load configured Google Ads, Meta and TikTok measurement tags and send only page views and four bounded outcomes: successful server acceptance of a free setup-review request, reaching secure checkout, starting a free trial and activating a paid subscription. The setup-review event contains only the form name; it does not contain the submitted answers, business name or reply email. Signed Stripe subscription updates create a small retryable record for the two billing outcomes containing an opaque event identifier, event type, plan, monthly value, timestamps and a one-way subscription key used only to reject duplicates. It contains no customer identifier, email address, tender identifier or readable Stripe subscription identifier, is removed with the TenderCue account and is not included in the account export. Google Analytics can receive a confirmed outcome on a signed-in visit after Analytics only or Analytics + ads consent; Google Ads, Meta and TikTok receive it only after Analytics + ads consent. Each configured destination is acknowledged independently, and the same opaque event identifier lets measurement providers reject a retry. Tender documents, imported alert text, business-profile text, account email addresses, saved-item names, Stripe customer or subscription identifiers and payment-card details are never included in the measurement payload. Essential only loads none of these tags. You can change the choice from the Privacy choices control at any time.

Your responsibility

You remain responsible for checking procurement conditions and complying with confidentiality obligations imposed by the issuing organisation.

Last updated: 3 November 2026.