Privacy Policy
Last updated: 1 November 2026
1. Introduction
SangoBids ("we", "our", "the platform") is committed to protecting the privacy of its users. This privacy policy explains how we collect, use, store and protect your personal information when you use our mobile app and our website.
2. Data we collect
2.1 Data you provide
- Account information: first name, last name, email address, phone number
- Business information: company name, business sector, regions of operation
- Company profile: skills, certifications, licences (for paying subscribers)
- Preferences: sectors, regions, contract types, keywords for alerts
- Compliance documents: you can upload professional documents (tax certificates, certifications, licences, articles of incorporation) to a secure vault to keep your bid file in one place.
- Subscription data: plan subscribed to (Verified, Pro), billing cycle (monthly or annual), status (active, expired, cancelled), renewal date and payment method.
2.2 Data collected automatically
- Usage data: pages viewed, tenders opened, searches performed
- Technical data: device type, operating system, app version
- Notification tokens: identifiers used to deliver push notifications
3. How we use your data
We use your data to:
- Provide and improve our services
- Send you personalised tender alerts
- Process your submissions and track your applications
- Provide analyses through our artificial-intelligence tools
- Communicate with you about your account
- Keep the platform secure
Quote requests sent to companies
Since 1 November 2026, anyone, even without an account, can send a quote request to a company from its public SangoBids page. The data entered (name, organisation, phone or email, description of the need, originating page) is used only to pass the request on and allow a reply. On the page of a company that is not a member, the request is forwarded to up to three member firms of the same sector and country, each told where it came from.
- Recipients: the receiving company or companies, by email, mobile notification and in their member area; our technical providers (section 4), each within its role. No other transfer, no prospecting.
- Duration: 24 months after the request, then anonymisation (section 6).
- Responsiveness indicator: the time between the request and the company's first reply feeds an aggregate badge ("replies within 24 h / 48 h") on its page; no requester data appears there.
- Your rights: access, rectification, objection and deletion by email to contact@sangobids.com (section 7). Deletion is carried out in our database and notified to the receiving companies.
- Formalities: this processing is declared to the ARTCI (Côte d'Ivoire) and the CDP (Senegal), and will be declared to the Cameroonian authority as soon as its filing desk opens.
4. Data sharing
We never sell your personal data. We may share your information with:
- Service providers: hosting of the site and API (Vercel, Paris region), database (Supabase, Paris region, France), email (Resend, United States), mobile notifications (Expo, United States: title and excerpt only), rate limiting (Upstash Redis, United States: IP address for 60 seconds), background jobs (Railway), delivery of verification codes (OTP) by WhatsApp and SMS (SMSala), document storage (Backblaze B2). Your data is therefore hosted in France; only delivery flows pass through the United States, under contractual protection clauses.
- In-app subscription management: RevenueCat processes purchases made through the App Store and Google Play (user identifier, subscription status, purchase and renewal events). Apple also receives the information needed to process the payment when you buy through iOS.
- AI analysis services: Anthropic (Claude) for our analysis tools. The content of documents uploaded to your vault is sent to Anthropic solely to extract their metadata automatically (document type, expiry date, number, issuing body). This data is not used to train AI models.
- Competent authorities: where required by law
5. Data security
We apply appropriate security measures to protect your data:
- Encrypted communications (HTTPS/TLS)
- Secure authentication by OTP (one-time password)
- Secure storage of authentication tokens (Keychain on iOS, Keystore on Android)
- Encrypted and backed-up database
6. Data retention
Your data is kept for as long as your account is active. You can delete your account at any time from the app (Me tab) or the website (Settings > Privacy), or by contacting us at contact@sangobids.com. The steps, and the details of which data is erased or retained, are set out on the Account deletion page. Quote requests left by visitors without an account are kept for 24 months after the request, then anonymised: name, organisation, phone and email are erased, the need and the dates remain for statistics. They are deleted earlier at the visitor's request or when the receiving company closes its account.
7. Your rights
You have the following rights:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate information about you
- Erasure: request the deletion of your data
- Portability: receive your data in a structured format
- Objection: object to the processing of your data
8. Cookies and similar technologies
Our website uses essential cookies needed for the platform to work. The mobile app uses local storage for preferences and the offline cache.
9. Push notifications
With your consent, we send push notifications to alert you to new tenders matching your criteria. You can turn notifications off at any time in the app settings or your device settings.
10. Changes to this policy
We may update this privacy policy. Changes will be published on this page with a new update date.
11. Contact
For any question about this privacy policy, contact us:
- Email: contact@sangobids.com
- Phone: +237 6 81 10 84 39
- Address: Douala, Cameroon
- Data protection correspondent: contact@sangobids.com (reply within 30 days)