Essential
Store the consent choice in first-party browser storage for 180 days. It is not used to personalise advertising.
Control and minimisation
How Tenderiva protects your personal data, manages consent and lets you exercise your rights.
To introduce Tenderiva to companies whose work relates to public procurement, RIEST CLEMENT, the operator of Tenderiva, uses limited professional contact details: name, role, company, business e-mail address and contact source. These details come from public professional profiles and Icypeas, our e-mail discovery provider. We rely on our legitimate interest in presenting a service relevant to the recipient’s professional activity. This does not mean that the recipient is already a customer or has expressed an interest.
Our first message explains the source of the contact details and includes an opt-out link. You can also reply to that message or contact contact@tenderiva.com. No automatic follow-up is triggered by a lack of response. These messages contain no e-mail opening tracking pixels.
Prospecting data is available only to the operator and the providers needed to process it, including Icypeas and OVHcloud for hosting and sending e-mails. We do not sell this data. It is kept for a maximum of three years from collection or the last contact initiated by the professional. A hash of the address and the opt-out date are kept separately for as long as necessary to respect requests not to be contacted.
You may request access, correction, erasure or restriction of your data and object to direct marketing at any time by writing to contact@tenderiva.com. You may also complain to the CNIL, or to the ICO if you are in the United Kingdom. Icypeas describes its processing, including any transfers outside the European Economic Area, in its privacy policy.
When you create an account, Tenderiva stores your email address, optional name, a one-way password hash, language, favorites and radars. Your plain-text password is never stored.
Without “Keep me signed in”, the session ends when the browser closes and expires no later than 12 hours after it starts. With this option, it can last up to 30 days. Confirmation links expire after 2 hours and password-reset links after 1 hour. An account that is never confirmed is deleted after 7 days. Other account data is kept until the user deletes the account, subject to applicable legal obligations.
Optional analysis sends selected extracted text to OpenAI with your consent. The reader offers local reading or Mistral OCR with separate consent. Word files are read locally as text sections, without running macros or loading links. The original file is not sent for this reading. Only selected text is sent if you then authorise AI analysis.
Local reading: The PDF and full extracted text are processed in your browser and stay on your device. A request checks your OCR access without including the document, its name or its text. Audience measurement is disabled in the reader. If you choose to save an excerpt, only the reviewed passage, its page, category and document name are sent to Tenderiva and stored with the selected opportunity. They remain personal or are shared with authorised Team members, depending on your chosen destination.
Word files are read locally as text sections, without running macros or loading links. The original file is not sent for this reading. Only selected text is sent if you then authorise AI analysis.
With your explicit consent, Mistral OCR sends the entire PDF to Mistral through Tenderiva, even when only selected pages are requested for recognition. Stopping or a timeout does not guarantee cancellation at Mistral; pages may still count towards your allowance. Text analysis by OpenAI requires separate consent.
Local reading: Recognition tools and models are downloaded from Tenderiva. Your browser may cache the models; the reader does not store your PDFs or their text in that cache. The Clear document button removes the file and results from the reader. Previously downloaded exports remain on your device. Clearing the document from the reader does not delete previously saved excerpts: delete them in the excerpts section of your preparation.
To analyse a notice, Tenderiva sends OpenAI the notice information imported from the official source, only after your explicit consent. Linked tender documents are neither downloaded nor read. The retention, access and deletion rules described for PDF analyses also apply to notice analysis results and quotations.
We try to retrieve the complete official publication. This preparation does not use an analysis credit.
Notice and PDF analyses use the same allowance.
Analysis is optional. After your authorisation, Tenderiva sends selected text and page numbers, and coverage information to OpenAI to provide this assistance. Only share content you are entitled to disclose; remove unnecessary personal data.
Tenderiva asks OpenAI not to save the response as application state (store=false). API data is not used to train models by default. Security logs may include text for 30 days, or longer for legal or safety reasons; technical caching may also occur. This setting guarantees neither zero retention nor processing exclusively in the EU.
Tenderiva keeps the result, quotations and selected text for rereading sources until the analysis, account or Team workspace is deleted. The original file is not kept in this history. A minimal technical ledger remains for allowances, costs and repeated requests; the actor is anonymised after account deletion.
The selected text is also saved with the result so that sources can be reread. This data stays in the chosen personal or Team workspace and can be deleted with the analysis.
Your feedback record stores the rating, optional comment, language, publication and name choices, any public profile name, moderation status, and creation, update and moderation dates. The publisher and moderator access it to improve the service, prevent abuse and review publication under their legitimate interest; public display and name attribution rely on your consent. Your email address is never displayed. Withdrawing consent removes the review from public display but keeps it private; rejected feedback is deleted after 90 days, while other feedback remains until you delete it or your account. You can edit or delete it at any time.
For any paid subscription payment, Stripe processes the payment and payment method. Tenderiva receives only the customer and subscription identifiers, status and end date; card details are entered directly with Stripe and do not pass through this site.
Technical logs are kept only as long as necessary for security and service reliability, then deleted or aggregated unless an incident must be investigated. Messages are kept until your request is handled and, where necessary, for evidence or legal obligations. Public procurement information remains available while it is useful for presenting current or recent opportunities; official corrections and withdrawals are reflected in updates. Your cookie choice is kept for 180 days unless you change it earlier.
A technical cookie keeps your search for 24 hours while you choose a plan. It is tied to your login session.
Access is limited to the publisher, hosting provider and service providers that need it. Optional audience measurement or advertising services receive only the data required for their purpose after your consent. Cookie settings identify the active services and let you change your choice.
Consent
Store the consent choice in first-party browser storage for 180 days. It is not used to personalise advertising.
With your consent, Google Analytics 4 helps us understand how the site is used. Its cookies expire after 180 days. Search terms and filters contained in page addresses are not sent to Google Analytics.
If you agree, Google Analytics and Google Ads connect visits from our advertisements with signups, created radars and first paid subscriptions. Browser and campaign identifiers, page categories and conversions are used; your emails, searches and documents are not sent. Advertising personalisation and remarketing are disabled.
Your choice is kept for 180 days. You can refuse or withdraw consent at any time in cookie settings. Account pages and the document reader do not load Google measurement.
Accept and reject are offered at the same level. You can reopen settings and withdraw your choice at any time.
Depending on your situation, you may request access, correction, erasure, restriction or portability, object to certain processing and withdraw consent without retroactive effect. A proportionate identity check may be required.
For professional data originating in a TED notice, provide the publication reference and field concerned. Tenderiva can correct its display and direct you to the authority controlling the official notice.
You may also lodge a complaint with the CNIL, the French data protection authority. Contact the CNIL ↗
Page last updated: