Data protection
Privacy notice
Promociones Baja Yesera S.L. is the controller for AI Tender Hunter account workspaces and direct enquiries. No analytics or advertising tag runs by default. If you consent, Google Ads conversion measurement records whether an ad led to a new account. One strictly necessary cookie connects the current browser to the correct workspace.
Information we receive
When you email us, we process the contact details, business needs, and correspondence that you choose to provide. You can search and submit product feedback without an account. Product feedback includes the category, message, page path and interface language that you choose to send; we do not ask for an email address in that form. When you create an AI Tender Hunter account, our AWS Cognito account service provides us with a stable account identifier, verified email address, and optional display name. We store the capability profile, delivery regions, partner needs, saved searches, alert choices, tender records, status, decision answers, structured outcome reasons, and private outcome notes that you choose to save. Separately, we retain source-linked public procurement facts, including buyer organisations and published winner organisations, to maintain tender and award history; published personal contact details are excluded from that archive.
Why we use it
We use the information to create and secure your account, keep saved work available across devices, deliver email alerts you explicitly request, respond to enquiries, operate and improve the product, and provide privacy-protected community benchmarks. Structured win, loss, and no-bid statuses and outcome reasons recorded in a free account are included in community totals as an integral condition of that account service, not as optional consent. A market total appears only after five separate contributing accounts and an outcome reason only after three. Company profiles, free-text notes, and individual activity are not published in those totals. You can continue to search without an account, delete saved workspace data in the product, or request deletion of the account identity by email. The legal bases are performance of the requested account service, your consent for optional email alerts, legitimate interests in operating and securing the service and producing aggregate market intelligence, and applicable legal obligations.
When you request a signed-in search with a completed fit profile, we use selected profile fields and public notice metadata to generate a semantic fit score, reasons, risks, and an evidence-confidence label. The output supports your review and does not make a legal, eligibility, or bid decision.
We use submitted product feedback to investigate problems and decide what to improve or build next. It is stored in the private product-feedback queue and is not sent by email. The legal basis is our legitimate interest in improving and securing the service. Do not include confidential or personal information in a feedback message.
Sharing and transfers
Account registration, email verification, and authentication are provided by AWS Cognito on our branded auth.aitenderhunter.com domain. AI Tender Hunter receives an account identifier, verified email address, and optional display name; the application database does not receive or store the password. Account records and source-linked tender history are stored in a private application database operated by our hosting provider. We use authentication, hosting, email, and IT providers only as needed to operate the service and do not sell personal account data. Where a provider processes data outside the European Economic Area, we rely on an applicable legal transfer mechanism and contractual safeguards.
Semantic matching is processed through Amazon Bedrock using an EU geographic model profile. We send the selected fit-profile fields and public notice metadata, but not the account email, password, private tender notes, pipeline activity, or community outcomes. We keep only the validated score and explanation in the private workspace cache for up to 90 days, and delete it with the workspace.
Optional journey and advertising measurement
With separate consent, we also keep first-party journey events (visit, search outcome, result open and signup step), a random 30-minute visit identifier, coarse device/market/referrer category and, when signed in, the internal account identifier. No search text, emails, profiles or notes are included. Records are retained for up to 90 days and available only to the operator. Withdrawal stops further collection and clears the visit cookie. We ask separately before loading the Google Ads tag. If you allow measurement, Google may receive the Google Ads click identifier and ordinary browser, device and request information, plus a single event when a genuinely new AI Tender Hunter account is created. We do not send the account email, name, profile, saved work or tender activity to Google; enhanced conversions, remarketing and personalised advertising are not enabled.
The legal basis is consent. Your choice is stored in this browser’s local storage. You can withdraw or change it at any time through “Privacy choices”; the Google tag remains unloaded when you continue without measurement. Google may process measurement data outside the EEA under its applicable safeguards. See Google’s privacy information for details.
Retention
If no relationship begins, we normally delete or anonymise an enquiry within 12 months after the last meaningful contact, unless it is needed longer for a legal obligation or claim. Product feedback is reviewed for deletion or anonymisation after 12 months. Anonymous workspace data is deleted after 12 months of inactivity. Account data remains available while the account is active and can be deleted from the fit-profile page. Alert delivery records are retained only as needed to prevent duplicates and handle delivery problems.
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing by emailing info@martiohn.com. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority, including Sweden’s IMY where applicable. We do not make decisions about applicants solely by automated means.
Last updated: 13 September 2026