Privacy Policy

Version 1.1 | Effective Date: February 5, 2026 | Deep Forest Lab Pte Ltd

1. Introduction

Deep Forest Lab Pte Ltd (“we”, “our”, or “us”) operates the TenderWatch mobile application and website (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the Singapore Personal Data Protection Act 2012 (PDPA). By using TenderWatch, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, we collect:

Account Information: Email address and display name from your Google or Apple sign-in
Profile Information: Company capabilities and qualifications you choose to provide for tender matching
Preferences: Your notification settings, industry preferences, and app settings
User Activity: Tenders you bookmark, view, or mark as read

2.2 Information Collected Automatically

Device Information: Device type, operating system, and unique device identifiers for push notifications
Usage Data: App features accessed, time spent, and interaction patterns
Log Data: IP address, access times, and error logs for troubleshooting

2.3 Information from Third Parties

Authentication Providers: When you sign in with Google or Apple, we receive your email address and basic profile information as authorised by you.

3. How We Use Your Information

We use your information for the following purposes:

Provide and maintain the Service
Authenticate your identity
Send push notifications about matching tenders (with your consent)
Personalise tender recommendations based on your preferences
Analyse tender documents using AI services (public documents only)
Improve and optimise our Service
Respond to your inquiries and support requests
Comply with legal obligations under Singapore law

4. AI and Automated Processing

AI Disclosure: TenderWatch uses artificial intelligence services (including large language models) to analyse tender documents and extract submission requirements. This processing covers publicly available tender documents only, not your personal data.

Our AI processing analyses publicly available tender documents from government sources, does not process your personal information or profile data, and is used to improve the accuracy and usefulness of tender information.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We use third-party services to operate our platform:

Google Cloud Platform (hosting and infrastructure) — Singapore region
Firebase by Google (authentication, database, analytics, push notifications)
Anthropic (AI document analysis) — processes only public tender documents
RevenueCat (subscription management)

Legal Requirements: We may disclose information if required by law, court order, or government request under Singapore law.

Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

All third-party service providers are contractually obligated to provide equivalent data protection, process data only for specified purposes, implement appropriate security measures, and notify us of any data breaches. We do not share your personal data with advertisers or marketing companies.

6. Data Retention

Account Data: Retained until you delete your account
Activity Data: Retained for 2 years from the date of activity
Log Data: Retained for 90 days

After account deletion, we will remove your personal data within 30 days, except where retention is required by Singapore law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit (HTTPS/TLS) and at rest, access controls and authentication, regular security assessments, and secure cloud infrastructure with industry certifications (SOC 2, ISO 27001).

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act 2012, you have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Withdrawal of Consent: Withdraw consent for collection, use, or disclosure of your data
Data Portability: Request your data in a portable format (where applicable under the Data Portability Obligation)
Account Deletion: Request deletion of your account and associated data
Opt-out: Disable push notifications or marketing communications

How to Exercise Your Rights

In-App: Go to Settings > Account > Delete Account
Web: Visit pub.tenderwatch.lol/delete-account
Email: Contact privacy@deepforestlab.com

For data access, correction, or portability requests, please email us at privacy@deepforestlab.com. We will respond within 30 days as required under the PDPA.

9. Data Transfers

Your data is primarily hosted on Google Cloud Platform in Singapore. Some processing may occur outside Singapore (e.g., AI document analysis). When data is transferred internationally, we ensure appropriate safeguards are in place, including data processing agreements with our service providers that meet the standards required under the PDPA.

10. Children’s Privacy

TenderWatch is a business-to-business service not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a person under 18, please contact us immediately and we will delete it.

11. Push Notifications

With your consent, we may send push notifications about new tender opportunities matching your preferences, tenders closing soon that you have bookmarked, and award announcements for tenders you are tracking.

You can disable push notifications at any time through your device settings or within the app under Settings > Notifications.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page with an updated date, sending you a notification through the app for material changes, and requesting your consent again where required by law.

13. Contact Us

Deep Forest Lab Pte Ltd
(Operating as TenderWatch)

Email: privacy@deepforestlab.com
Website: tenderwatch.lol
Account Deletion: pub.tenderwatch.lol/delete-account

For PDPA inquiries, we aim to respond within 30 days as required under Singapore law.