Privacy Policy

1. General provisions

This Privacy Policy describes how the IT Tender platform collects, uses, and protects users’ personal data in accordance with the legislation of the Republic of Tajikistan and the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data.

By using the Platform, you consent to the processing of your personal data on the terms set out in this Policy.

2. What data we collect

Account data

At registration we collect: organization name, contact person’s first and last name, email, phone number, and region. For IT companies, additionally: company description, logo, specializations, and portfolio.

Tender and application data

We store all tenders, submitted applications, attached documents, chat correspondence, and application status history.

Technical data

Automatically recorded: IP address, browser and device type, pages visited, session times, and referral sources.

Data we do NOT collect

We do not collect information about racial or ethnic origin, political or religious beliefs, or membership in parties or trade unions.

3. Cookies and tracking

The Platform uses cookies — small text files stored on your device. They are necessary to maintain the session, save settings, and analyze traffic.

You can disable cookies in your browser settings, but this may affect the operability of certain Platform features.

We use analytics tools to understand how users interact with the service in order to improve it.

4. Purposes of data processing

• Operating accounts and authentication.
• Publishing tenders and processing applications.
• Notifications about changes to tender and application statuses.
• Verifying organizations and checking the accuracy of data.
• Improving functionality and user experience.
• Preventing fraud and security breaches.
• Complying with legal requirements.

5. Sharing data with third parties

We do not share your personal data with third parties, except for:

• Technical providers — cloud services and hosting required to operate the Platform; they are obliged to comply with this Policy.
• Government bodies — upon a lawful request in accordance with the legislation of the Republic of Tajikistan.
• Successors — in the event of reorganization or sale of the Platform’s business, while preserving the terms of this Policy.

Anonymized aggregated data may be shared with partners for analytics without the ability to identify specific users.

6. Your rights

You have the right to:

• Access your personal data via the “Profile” section.
• Correct inaccurate or outdated data.
• Request deletion of your account and related data.
• Withdraw consent to receive marketing notifications.
• File a complaint with the authorized personal-data protection body.

To exercise these rights, contact us using the details in the site footer.

7. Data security

We apply reasonable technical and organizational measures to protect your data from unauthorized access, alteration, or destruction: encryption of data in transit (HTTPS), employee access control, and regular backups.

However, no security system is absolutely reliable. In the event of a data breach, we will notify affected users within the timeframes established by law.

8. Data retention

Personal data is stored for the entire term of the account and for three years after its deletion, in order to fulfill legal obligations. After this period, the data is destroyed or anonymized.

9. Changes to the Policy

We may update this Policy. A new version takes effect upon publication on the site. Continued use of the Platform after publication of changes constitutes your acceptance of them.