Privacy Policy

Tendex is run by Muhammadali, a private individual, who is also responsible for your data.

If you have a question or request, get in touch by email at enotience@gmail.com or on Telegram at @notience.

Data is handled under the Law of the Republic of Uzbekistan "On Personal Data".

Account. Your email and password. We never keep the password itself, only its bcrypt hash, so nobody can see your password, including us. We also record when you signed up, your plan and when you last visited the site.

Telegram. If you sign in with Telegram or connect the bot, we keep your Telegram ID, username, first and last name, and the bot language.

Settings. The sectors and regions you picked, minimum budget, keywords and excluded words, the tax IDs of buyers you follow, and where you want notifications sent.

Account activity. Tenders you saved and opened, how long you spend on the site each day, and how many times you used AI features.

Push notifications. If you turned them on: the subscription address and keys your browser provides, a short note about the device, and the language.

Visits. Which page was opened (without URL parameters), language, which site or ad link brought you here, device type and operating system, how long you stayed on the page, and a random browser session number. If you're signed in, the visit is linked to your account.

IP address. Your IP address is not written to the visits list. Instead we store a hash made with a secret key that changes every day. The key is deleted after 48 hours, and after that the IP can't be recovered from the hash. The IP itself is used only briefly, to fend off attacks and limit request rates, and may stay in server logs for a short time.

Text sent to AI. Your questions to EBA ai and the Help section, the company details you enter for a commercial proposal, and .docx documents you upload for analysis. The file itself doesn't stay on the server: the text is read, sent to the AI and deleted as soon as the analysis is done. Questions the assistant couldn't answer are saved so we can add to the knowledge base, and they are linked to your account.

OmborPRO. If you connected your warehouse software to Tendex: a record of the connection and the tender results the software sends (status, contract number, amount and note).

We never ask for your card details. Pro is paid outside the site by a regular bank transfer.

The site has no Google Analytics, Yandex Metrica or ad pixels. We collect visit statistics ourselves, on our own server.

We don't sell your data and we don't hand it to anyone for advertising.

To run your account, let you sign in and send password reset links to your Telegram.

To let you know via Telegram and push when a new tender matches what you're looking for.

To make the AI features work: answering questions, analysing documents, drafting commercial proposals.

To switch on Pro and keep track of its term and the daily AI limit.

To improve the site. For this we only look at overall numbers, such as which pages people open more and which less.

For security: stopping spam, automated requests and break-in attempts.

AI services. When you use an AI feature, your question or document text is sent to one of these services to get an answer: Google (Gemini), Groq, Mistral, Cerebras, NVIDIA, OpenRouter, GitHub Models (Microsoft). They are based outside Uzbekistan. Your email, password and Telegram details are not sent to them. By using an AI feature you agree to this text being sent abroad, so please don't leave unnecessary personal details in your documents.

Telegram. Messages from the bot are delivered through Telegram.

Push services. Push notifications are delivered by your browser maker's service (Google, Mozilla, Apple and others).

Server. The site runs on a rented server. The server owner only stores the data and doesn't use it.

Government bodies. Only where the law requires it and in the way the law sets out.

Tendex doesn't use cookies. A few things are kept in the browser's own storage (localStorage and sessionStorage): your sign-in token, light or dark theme, notes about pop-ups you closed, and a random visit session number.

All of this stays on your device. If you clear it in your browser settings, you'll be signed out and settings will go back to the defaults.

Data is stored in Uzbekistan, on a server in Tashkent.

Your account, settings and account activity are kept until the account is deleted.

The record of each visit is kept for 30 days and then deleted. After that only daily totals remain, and they can't be used to tell who you are.

A push subscription is kept until you turn it off or your browser cancels it.

Your connection to the site is encrypted with HTTPS. Passwords are stored only as hashes. Only the administrator can access the database.

If we find out that someone else has got into your data, we'll tell you right away via Telegram or on the site.

Ask what we keep about you and get a copy.

Correct wrong information. Most of it you can change yourself in your account settings.

Stop notifications. Disconnect the Telegram bot in your account or turn off push notifications.

Delete your account and withdraw consent. Write to enotience@gmail.com from your account's email, or message @notience on Telegram. The account and the data linked to it will be deleted within 30 days, except anything the law requires us to keep.

If you feel your rights have been violated, you can complain to the government body responsible for personal data.

Tendex is made for businesses and organisations. People under 18 shouldn't sign up.

If we change this policy, the new text will appear on this page with its date. For major changes we'll give notice in advance through the Telegram bot or on the site.

If you keep using Tendex after a change, you're taken to agree with the new text.