Privacy Policy

eSourcing Data Ltd is the data controller for personal data processed through BidWriter. We operate BidWriter at bid.winacontract.com and are registered as a data controller with the Information Commissioner's Office (ICO).

Contact us about privacy matters at: privacy@winacontract.com

Account data: When you register, we collect your name, email address, organisation name, and password (stored as a secure hash).

Profile and content data: Company profile information, bid library entries, tender details, questions, responses, and any other content you upload to the platform.

Usage data: How you interact with BidWriter, including pages visited, features used, AI credits consumed, and actions taken.

Payment data: Payment is processed by Stripe. We do not store your full card details. We receive and store transaction records, subscription status, and billing history.

Technical data: IP address, browser type, device information, and cookies. See our Cookie Policy for details.

Communications: If you contact us for support, we retain records of that correspondence.

We use your data to:

• Provide, maintain, and improve BidWriter
• Process your subscription and manage billing
• Send transactional emails (account verification, password resets, billing notifications)
• Send product updates and feature announcements (you can opt out at any time)
• Provide customer support
• Monitor platform security and prevent fraud
• Comply with legal obligations
• Analyse anonymised, aggregated usage patterns to improve the platform

We do not sell your personal data to third parties. We do not use your bid content to train AI models without your explicit consent.

Contract performance: Processing necessary to provide BidWriter to you under our Terms of Service.

Legitimate interests: Platform security, fraud prevention, and improving our services.

Legal obligation: Where we are required to process data to comply with applicable law.

Consent: For marketing communications. You can withdraw consent at any time.

All data is stored in UK-based data centres. We use Supabase for database storage, which maintains UK and EU data residency.

We implement appropriate technical and organisational security measures including encryption in transit (TLS), encrypted password storage, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

We retain your personal data for as long as your account is active and for a reasonable period thereafter in case you wish to reactivate. We retain billing records for 7 years to comply with financial regulations.

You may request deletion of your account and personal data at any time by contacting privacy@winacontract.com. Some data may be retained where required by law or for legitimate business purposes such as fraud prevention.

We use the following third-party services which may process your data:

• Stripe — payment processing (UK/EU data handling)
• Supabase — database and authentication
• Resend — transactional email delivery
• Render — cloud hosting and deployment
• Anthropic — AI model provider for bid writing features

Each of these providers operates under their own privacy policy and data processing agreements with us. We select providers that offer appropriate data protection standards.

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data in certain circumstances
• Right to restriction — restrict how we process your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at privacy@winacontract.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

We use cookies and similar technologies to operate BidWriter. For full details see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice within BidWriter. The date at the top of this page indicates when it was last updated.