Security & Data

How MyTenderBox handles your data.

MyTenderBox processes business profile and tender data so we can score opportunities, explain the fit and deliver your daily digest. This page summarises the practical controls and providers behind the service.

Customer-provided data

We store the information needed to run your tender digest: your business name, work email, digest recipients, company website, source and region preferences, business description, profile data, digest history and billing status metadata.

Public procurement data

Tender notices and award notices come from public procurement sources. We combine that public data with your company profile so we can score opportunities and surface relevant competitor awards.

Where data is hosted

The MyTenderBox API and database run on Fly.io in the London region. The website is served through Cloudflare. We use HTTPS across the site and service endpoints.

What goes to AI providers

Tender notices, your business description and relevant profile context are processed by Anthropic Claude models through AWS Bedrock so opportunities can be scored and explained. MyTenderBox does not call the direct Anthropic API.

Model training

Customer data submitted to MyTenderBox is used to provide the service to you. MyTenderBox does not sell it or use it to train a MyTenderBox model.

Payments

Payments and subscriptions are handled by Stripe, by card or Bacs Direct Debit. MyTenderBox does not store card numbers or bank account details. We only receive billing metadata such as customer ID, subscription status, plan and invoice events.

Access controls

Admin endpoints are protected, and service access is limited to what is needed to operate support, billing, profile generation and digest delivery.

Backups and deletion

Cancelled accounts retain billing records where required for tax and accounting obligations. Personal preferences and business descriptions are deleted within 30 days of cancellation unless you ask us to delete them sooner. Dated encrypted database backups are retained for 30 days.

Company and data protection details

MyTenderBox is a trading name of Macleod Web Limited, registered in England and Wales, company number 17304944. Our ICO data protection registration number is ZC184056.

For data, security or deletion requests, email info@mytenderbox.com. The full legal wording is in our Privacy Policy.