Privacy Policy

1. Scope and legal framework

This Privacy Policy applies to the web platform at https://tendarix.ca (the “Platform”), operated by Synapcy Development INC. and its corporate affiliates (“Tendarix”, “we”, “us” or “our”). It covers information collected through our procurement alerts, AI summaries, account portal and communications.

Our practices are governed by Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Québec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) where it applies, and Canada’s Anti-Spam Legislation (CASL).

2. Information we collect

• Account and billing information: When you register or subscribe: your name, email address and company, the business details you choose to add to your profile, and your subscription status. Card details are collected and processed directly by our PCI-compliant payment processor, Stripe; we do not store full card numbers.
• Procurement preferences and activity: To deliver alerts and match scores: saved searches, target sectors, categories and provinces, watched tenders, bid-tracking history and content you enter into our tools.
• Messages you send us: What you submit through the contact form or by email.
• Usage and technical information: When you visit tendarix.ca, our servers record your IP address, device and browser type, pages requested, timestamps and referring URLs. We use essential cookies and, only if you accept them, analytics cookies. See our Cookie Policy.

3. How we use your information

We use personal information only for legitimate business purposes, namely to:

• provide, maintain and personalize our search, matching and notification services;
• improve our matching and ranking using aggregated, non-identifying patterns;
• process subscription payments, invoices and renewals;
• send service updates, alerts, security notices and support responses;
• send commercial electronic messages in accordance with CASL (see our Email & Anti-Spam Policy); and
• detect and prevent security threats, fraud and unauthorized scraping.

4. Sharing and service providers

• No sale of data: Tendarix does not sell, rent or trade your personal information or search profile to data brokers or advertisers.

We share information only with service providers that help us operate the Platform, under contractual confidentiality and data-protection terms:

• Hosting: DigitalOcean, for servers, databases and backups (Toronto, Canada).
• Payments: Stripe, for subscription payments.
• Email: Resend, to deliver alerts, account and security messages, newsletters and other email you have agreed to receive.
• AI processing: Groq and Anthropic, for summaries, analysis and drafting. Only the text needed for the task is sent.
• Analytics: Google Analytics, only if you accept analytics cookies.
• Legal disclosures: We may disclose information where required by law, court order, subpoena or lawful government request, or to enforce our Terms and protect our legal rights.

5. Public procurement data

Tendarix aggregates public procurement records, RFPs and contract awards published by federal, provincial, municipal and institutional bodies. Information in those public records, such as buyer contact names and contracting-entity addresses, comes from the published notices themselves. To ask about information in a public notice, contact our Privacy Officer.

6. Security, storage and residency

We use technical, administrative and physical safeguards appropriate to the sensitivity of the information to protect it against loss and unauthorized access, disclosure, alteration or destruction. No system is perfectly secure.

• Encryption in transit: Connections to tendarix.ca are protected with TLS.
• Access controls: Administrative access is restricted by role, on a least-privilege basis.
• Storage location: Our application and primary database run on servers in Toronto, Canada.
• Processing outside Canada and Québec: Some service providers named in Section 4 may process information outside Québec and outside Canada, including in the United States, where it may be subject to local laws. See our Data Residency page.

7. Retention and account closure

We keep personal information only as long as your account is active or as needed for the purposes in this Policy. You can delete your account from your profile settings. If you have a Pro subscription, cancel it first from the Billing page. When an account is closed:

• your alerts and saved preferences stop;
• account credentials and contact details are deleted or anonymized within ninety (90) days, except where we must keep them for tax, audit or accounting purposes;
• billing and tax records are kept for at least six (6) years, as required by the Canada Revenue Agency; and
• anonymized aggregate usage statistics may be kept indefinitely.

Raw IP addresses in our visit logs are cleared after 90 days.

8. Your rights and choices

• Access, correction and deletion: You may request access to the personal information we hold about you, and ask us to correct or delete it, subject to legal limits. We respond within 30 days.
• Withdrawing consent: You may withdraw your consent at any time, subject to legal or contractual limits. Some services may then no longer be available.
• Marketing opt-out: You can unsubscribe from marketing email at any time using the link in any such message.
• Cookies: You can change your choice through the cookie settings or block cookies in your browser. Disabling essential cookies may affect navigation and sign-in.
• Complaints: If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information.

9. Children’s privacy

The Platform is intended for business and professional use by adults. Tendarix does not knowingly collect personal information from anyone under 18.

10. Privacy Officer

For questions, complaints or requests about this Policy or your personal information, contact the person responsible for the protection of personal information: