Privacy policy

Version of 21 October 2026

MyTender is a free aggregator of public procurement in Kazakhstan with a personal account and AI analysis of lots. This page describes what data we collect and how we use it.

What data we store

• Email address and password (encrypted) — to sign in to your account.
• Profile details you entered yourself: name, phone, city, company, BIN/IIN.
• Saved tenders, stages, notes and team data.
• Correspondence with suppliers started through MyTender (see below).
• Notifications you turned on: the browser push subscription, the Telegram chat with the MyTender bot, search subscriptions and the secret deadline-calendar link.
• Anonymous cookie-free site statistics: which pages are opened and where visitors come from (a daily visitor is a fingerprint that changes every day and is not linked to you), catalog search texts without numbers, BIN/IIN, phones or emails, and technical error reports from pages.
• If you are signed in — an activity log: where you came to the site from, which pages and lots you opened, what you searched in the catalog, what you added to or removed from the board — and when. Only MyTender administrators see it, to understand what is used, improve the service and help in support. It is kept for 180 days.

Gmail access

The “Supplier correspondence” feature works only if you have connected your Gmail yourself. We request two permissions:

• gmail.send — to send request emails that you have approved to suppliers from your address, and replies within those same threads;
• gmail.readonly — to read supplier replies only in threads started through MyTender. We do not open, read or store any other emails in your mailbox.

Emails from these threads are stored in our database so that we can show them to you and so that the AI can collect supplier terms (price, lead time, delivery, payment). The Gmail access token is stored encrypted. You can revoke access at any time: “My account → Personal details → Disconnect”, or in your Google account settings.

Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is not sold, not used for advertising and not used to train AI models.

AI processing

To analyse lots and correspondence, the text of procurement documents and supplier emails is sent to the Google Gemini API. We send only what is needed for the specific task.

Who we share data with

No one except the services the site runs on: Supabase (database), Oracle Cloud (hosting), Google (Gemini API and Gmail API), Telegram (only if you turned on Telegram notifications). Data is not sold to third parties.

Data deletion

To delete your account and all related data, email us at edamkaldybek@gmail.com. Disconnecting Gmail in your profile revokes mail access immediately.