Privacy Notice
Last updated: 27th Oct, 2026
1. Who we are
TenderNadi is operated by Primexa Technologies Sdn. Bhd. ("we", "us"), No. 5, Spg 560-42, Kg Sg Hanching, BC 2115 Jln Muara, Brunei Darussalam.
This Notice explains how we collect, use, disclose and protect personal data when you use the TenderNadi website, web app and related services. We handle personal data in line with Brunei Darussalam's Personal Data Protection Order, 2025 (PDPO).
It applies to account users, trial users, website visitors and people who contact us. TenderNadi is a business service and is not intended for anyone under 18.
2. What we collect and why
| Data | Examples | Why we use it |
|---|---|---|
| Account | Name, work email, phone, job title, password (stored encrypted) | Create and secure your account, sign in, support |
| Company profile | Company name, registration details, sectors, categories, capabilities, past projects | Match you with relevant tenders using AI |
| Preferences | Saved tenders, keywords, alert settings | Send alerts and personalise results |
| Billing | Plan, invoices, billing contact. WhatsApp number, payment receipts and bank transfer references. We do not collect card details | Process payments and keep financial records |
| Usage and device | Pages viewed, searches, clicks, IP address, browser, cookies | Run, secure and improve the Service |
| Communications | Emails, chat and support messages | Respond to you and keep service records |
| Marketing | Your opt-in choice | Send product news and offers, only if you opt in |
Consent. By signing up you consent to the uses above that are needed to provide the Service. Marketing messages need a separate opt-in and you can unsubscribe at any time.
AI matching. Our AI compares your company profile with tender requirements to suggest opportunities and relevance scores. Results are suggestions only. You decide which tenders to pursue. No automated decision with legal effect is made about you.
Cookies. We use essential cookies to keep you signed in and optional analytics cookies to improve the Service. You can control optional cookies through browser settings.
3. Who we share it with
We do not sell personal data. We share it only with service providers who process it for us under contract:
| Provider type | Purpose | Location |
|---|---|---|
| Cloud hosting | Store and run the Service | Singapore |
| AI provider | Tender finding and company matching | OpenRouter and Anthropic, United States |
| WhatsApp (Meta) | Send invoices, receive payment confirmations and support messages. A card payment provider will be added when automatic billing starts | Meta Platforms, United States |
| Email and messaging | Account emails and tender alerts | Resend, United States |
| Analytics | Understand how the Service is used | [provider, country] |
We may also disclose data where required by Brunei law, a court order or a regulator, or to protect our rights, users or the public.
4. Transfers outside Brunei
Some providers store or process data outside Brunei Darussalam, including in Singapore. When we transfer data overseas, we take steps required under the PDPO to make sure it receives a comparable standard of protection, such as contracts with data protection clauses.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account and company profile | While your account is active, then deleted or anonymised within [90] days of closure |
| Trial accounts not converted | [90] days after the trial ends |
| Billing records | [7] years, for tax and accounting law |
| Support messages | [2] years |
| Usage logs | [12] months |
6. Security
We protect personal data with encryption in transit and at rest, access controls limited to staff who need it, and regular backups. No system is fully secure. If a data breach is likely to cause significant harm, we will notify affected users and the regulator as the PDPO requires.
7. Your rights
| Right | What it means |
|---|---|
| Access | Ask what personal data we hold about you and how it has been used |
| Correction | Ask us to fix inaccurate or incomplete data |
| Withdraw consent | Withdraw consent at any time. If it is needed to run the Service, we may have to close your account |
| Marketing opt-out | Unsubscribe using the link in any marketing email or in account settings |
Send requests to our Data Protection Officer below. We will respond within [30] days and may need to verify your identity first. If you are not satisfied with our response, you may complain to the Authority for Info-communications Technology Industry of Brunei Darussalam (AITI).
8. Data Protection Officer
| Item | Details |
|---|---|
| DPO | Saud Ahmad |
| info@primexa.tech | |
| Address | Primexa Technologies Sdn. Bhd., No. 5, Spg 560-42, Kg Sg Hanching, BC 2115 Jln Muara, Brunei Darussalam |
| Phone | +673 879 7309 |
9. Changes to this Notice
We may update this Notice. We will notify account owners of material changes by email or in-app before they take effect, and show the new date below.
Last updated: 27th Oct, 2026