Information we process
We process your ChatGPT account identifier, email address and display name; plan and usage records; support requests; and the tender text you deliberately submit for AI review. Drafts currently saved by the editor remain in your browser unless submitted for review.
Why we process it
We use this information to provide and secure your account, enforce subscription allowances, deliver requested AI reviews, answer support requests, prevent abuse and maintain legally required business records. The usual lawful bases are performing our contract, taking requested pre-contract steps and our legitimate interests in operating a secure service.
Processors and international transfers
Hosting and authentication are provided through OpenAI Sites. Submitted review content is sent to the OpenAI API to generate the review. Payment information is handled by Stripe; BidCerta does not store full card details. Providers may process data outside the UK using their applicable safeguards.
Retention and security
Account and commercial records are retained while your account is active and afterwards where reasonably required for tax, fraud prevention or legal claims. Support records are retained only as needed. API credentials are kept server-side as encrypted hosting secrets.
Your rights
You can download the account data held by BidCerta from Account. Depending on the circumstances, you may request access, correction, deletion, restriction, objection or data portability through the in-product support form. Some records may need to be retained to meet legal obligations. You may also complain to the UK Information Commissioner’s Office.
Important tender-data warning
Do not submit classified information, special-category personal data, security credentials or material you are not authorised to process. Remove unnecessary personal information from tender responses before using AI review.