Privacy Policy

Last updated: June 20, 2026

1. Introduction

Welcome to IndTender, a product of Xspark LLP ("we", "our", or "us"). We are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp-based government tender alert service.

By registering for IndTender, you consent to the practices described in this policy.

2. Information We Collect

We collect the following information during onboarding and service use:

• Identity Information: Company name, GSTIN, business category
• Contact Information: WhatsApp mobile number, email address (optional)
• Business Preferences: Keywords, states of interest, business type
• Usage Data: Button clicks in WhatsApp, tenders viewed, bids tracked
• Payment Information: Transaction IDs only (we do not store card/UPI details)

3. How We Use Your Information

• To send personalized government tender alerts via WhatsApp
• To filter and match tenders to your business category and keywords
• To process subscription payments via PhonePe/Razorpay
• To send service updates, reminders, and support messages
• To improve our AI matching algorithm
• To comply with legal obligations

4. WhatsApp Data

We use the WhatsApp Business API (via Meta) to send messages. Your WhatsApp number is used solely for sending tender alerts. We do not read your other WhatsApp messages. Meta's privacy policy governs the WhatsApp platform itself.

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

• Meta (WhatsApp): To deliver messages via the WhatsApp Business API
• Payment Processors (PhonePe/Razorpay): To process subscription payments
• Supabase: Our database provider, for storing user profiles securely
• Legal Authorities: When required by Indian law or court order

6. Data Retention

We retain your data for as long as your subscription is active plus 90 days thereafter. You may request deletion at any time by contacting us.

7. Data Security

We use industry-standard security practices including encrypted databases (Supabase), HTTPS-only endpoints, and restricted access controls. No system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Opt-out: Stop receiving alerts at any time by messaging "STOP" on WhatsApp

9. Cookies

Our website uses minimal cookies for analytics (page visit counts). No tracking or advertising cookies are used. You can disable cookies in your browser settings.

10. Children's Privacy

IndTender is a B2B service intended for registered businesses. We do not knowingly collect data from individuals under 18 years of age.

11. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated date. Continued use of IndTender after changes constitutes acceptance.

12. Contact Us

For any privacy-related queries, contact us at:

• Email: xsparkllp@gmail.com
• WhatsApp: Message us on WhatsApp
• Address: Xspark LLP, Guwahati, Assam, India