Privacy Policy

BuildBidz (“BuildBidz”, “we”, “our”), a Nooran Corporation company, is committed to protecting the privacy, integrity, and confidentiality of all organizational and personal data entrusted to our construction procurement operating system.

This Privacy Policy explains how we collect, process, store, and safeguard information when you use our platform, web applications, mobile applications, and connected services in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.

We process information strictly necessary for construction procurement workflows:

• Account & Identity Data: Name, work email address, telephone number, designation, employer entity, and single sign-on (SSO/MFA) credentials.
• Procurement & Commercial Data: Requests for Quotation (RFQs), supplier bid submissions, line-item rate cards, Purchase Orders (POs), and GST/tax invoices.
• Site Field Verification: Gate delivery timestamps, GPS-tagged site arrival coordinates, weighment slips, Goods Receipt Note (GRN) signatures, and cargo inspection photographs.
• Voice & Media Inputs: Audio voice notes submitted by site supervisors for automated transcription into structured material requisitions.

BuildBidz implements rigorous multi-tenant data partitioning at the database and application layers. Every query and storage reference is strictly scoped to your authorized organization ID.

Suppliers and external counterparties only access documents, orders, and RFQs to which they have been explicitly invited. No supplier, contractor, or third party can view competing bids, internal scoring rationale, or cross-tenant pricing history.

Artificial intelligence models are utilized for automated document OCR, line-item matching, voice note transcription, and anomaly detection.

No Cross-Tenant Model Training: Your confidential project estimates, supplier quotes, and negotiated rates are never used to train public or foundational third-party AI models. Extracted data remains isolated within your organization’s secure boundary.

BuildBidz never sells, rents, or monetizes organizational or personal data. Information is shared only in the following controlled contexts:

• Invited Counterparties: Project procurement requests and POs are shared only with the suppliers and subcontractors you designate.
• Consent-Backed Finance Packs: Verified audit trails (orders, GRN proof, invoices) are exported to lending institutions or auditors only upon your explicit, recorded authorization.
• Statutory Compliance: Where required by valid legal process, judicial order, or tax authority mandate under Indian law.

Construction records, delivery receipts, and tax invoices are retained for the duration mandated by statutory construction warranty periods, GST laws, and your organization’s retention schedule.

Tamper-evident audit logs record every high-risk action (award approvals, payment authorizations, role adjustments) with immutable timestamping to support forensic dispute resolution.

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of personal data processed by BuildBidz.
• Request correction or updating of inaccurate personal records.
• Request erasure of personal data, subject to statutory retention obligations.
• Nominate an authorized representative in accordance with applicable rules.

BuildBidz utilizes privacy-preserving, cookie-less performance telemetry (Vercel Speed Insights and Web Analytics) strictly to monitor Core Web Vitals (Largest Contentful Paint, Interaction to Next Paint, Cumulative Layout Shift) and platform availability.

• Zero Invasive Tracking: Telemetry does not track individuals across third-party websites, create behavioral profiles, or sell browsing data.
• IP Pseudonymization: Diagnostic network origins and IP addresses are cryptographically hashed and pseudonymized before performance aggregation.
• Authorized Sub-processors: Edge and database hosting providers (Vercel Edge Platform and Supabase Managed Database/Storage located in the Mumbai, India region: ap-south-1) operate under binding data processing agreements compliant with the DPDP Act 2023 and Indian data residency standards.

In accordance with the DPDP Act 2023 and Information Technology Rules, for privacy questions or grievance redressal, please contact our Data Protection & Grievance Officer: