# How Tender Navigator uses your data

Source: Tender Navigator Knowledge Base, https://tendernavigator.com/knowledge-base/how-your-data-is-used (canonical HTML). Category: Account and profiles. Published 2026-09-08, last updated 2026-09-08.

> Tender Navigator, operated by SynergySoft Sarl in Geneva, collects account, usage, billing and service content such as filter prompts, and sends prompts and tender text to contracted AI providers to produce evaluations and summaries. AI interaction logs are kept for at least 30 days and up to 12 months. Optional analytics and marketing cookies require consent. The Privacy Policy, AI Transparency Notice and Data Processing Agreement are the authoritative texts.

> This article summarises the [Privacy Policy](/legal?v=privacy), the [AI Transparency Notice](/legal?v=ai) and the [Cookie Policy](/legal?v=cookies) for orientation. Those documents are the authoritative text; when this page and a legal document differ, the document applies.

## Who is responsible

Tender Navigator is operated by **SynergySoft Sarl**, Geneva, Switzerland. It acts as a data controller for website visitors, account owners, billing and support contacts, and as a data processor for the customer data of business customers. Questions go to legal@synergysoft.ch.

## What is collected

- **Contact and professional data**: name, email, company, country, and what you enter in forms.
- **Account and authentication data**: user ID, hashed credentials, tokens, access logs.
- **Usage and device data**: IP address, browser, device, session and feature-usage data, diagnostic logs.
- **Financial data**: billing details handled by Stripe. Tender Navigator does not store card data.
- **Service content, including AI inputs**: filter prompts, search queries, notes, the Business and Supplier Profiles, assistant messages, and other content you submit.
- **Cookies and tracking data**: see below.

Do not submit sensitive personal data (for example health or biometric data); the platform is not designed for it.

## How AI processing uses your data

Certain features send content to contracted third-party AI providers: filter prompts and tender text for evaluation, notice text for AI summaries, and your messages to the assistant. Tender Navigator transmits what is needed for the requested operation plus limited technical metadata. Logs of AI interactions (inputs, outputs, session identifiers, timestamps) are retained for a minimum of 30 days and up to 12 months for safety, quality and legal compliance.

The AI does not profile or evaluate you as an individual; it processes the business content you provide. Tender Navigator is classified as a limited-risk AI system under the EU AI Act for standard use. See [Limitations of AI evaluation](/knowledge-base/limitations-of-ai-evaluation).

## Third parties

| Category | Examples | Location |
| --- | --- | --- |
| Large language model providers | Contracted AI providers; the current list is available on request | US / EU as applicable |
| Cloud hosting and infrastructure | AWS, GCP, Azure or equivalent | EU / US |
| Payment processing | Stripe | US / EU |
| Analytics and monitoring | Analytics and monitoring tools | EU preferred |

Material changes to sub-processors are communicated with reasonable advance notice.

## Legal basis

Contract performance for delivering the service; legitimate interests for security, fraud prevention, analytics and AI safety monitoring; consent for email marketing and optional cookies; legal obligations where they apply.

## Cookies and consent

The site uses three categories: **necessary** (always on), **analytics** and **marketing**. Visitors in the EEA, the United Kingdom and Switzerland are asked before analytics or marketing cookies are set; rejecting is as easy as accepting. Preferences can be changed at any time through **Cookie preferences** in the footer. Tender Navigator's fonts are self-hosted, so no visitor IP is handed to a font provider.

## What stays private

Your filters, prompts, results, lists, notes and Business Profile are visible only to you. What becomes public is only what you publish in the Supplier Profile and the tenders you share through a public link. See [Supplier Profile and the Supplier Directory](/knowledge-base/supplier-profile-and-directory) and [Sharing a tender](/knowledge-base/sharing-a-tender).

## Your rights and requests

Access, correction, deletion and other rights under the GDPR, the Swiss FADP and the UK GDPR are exercised by writing to legal@synergysoft.ch. Business customers also have the [Data Processing Agreement](/legal?v=dpa).