Account and bid-workspace data, without payment tracking.
Effective 27 August 2026
Account data
When you register, TenderSlate stores your name, email address, a one-way password hash with a unique salt, privacy-consent time, account timestamps and secure session records. Your plain password is never stored.
Bid-workspace data
If you use the member workspace, TenderSlate stores opportunities you save, company facts you enter and the compliance matrices and response plans created from your tender text. This data is used only to provide your private workspace.
Tender documents
The original PDF, TXT or MD file is read to extract text and is not stored as a file. Extracted text is processed to create the requested analysis. The saved result contains requirement excerpts, page references and response prompts, so do not upload confidential material unless you are permitted to process it.
Payments and advertising
TenderSlate currently has no checkout, paid plan or advertising tracker. It does not request or store card numbers, bank details or crypto-wallet details.
Retention and control
Your account remains until you delete it. Session records expire after 30 days. Saved opportunities and analyses remain until you remove them or delete your account. Account deletion permanently removes the member account and its linked workspace records.
Security
Passwords are protected with PBKDF2-SHA-256, login attempts are rate-limited by temporary account locks, writes require same-origin requests, and session cookies are HttpOnly, Secure and SameSite=Lax.