Legal
Privacy Policy
How Civant collects, uses, and protects your personal data.
Effective: 9 March 2026 · Version 1.0
1. Who We Are
Civant Technologies Limited is the data controller for personal data collected through app.civant.eu and civant.eu. Incorporated in Ireland, subject to the EU GDPR and Irish Data Protection Acts. Contact: hello@civant.eu
2. Data We Collect
Account and Profile Data: name, email, job title, company name/size/country/sector, CPV preferences, target markets, billing name and address (card data processed by payment provider, not stored by us).
Usage Data: searches, alert configurations, competitor tracking, AI brief requests, login timestamps, session data, feature usage, IP address, device/browser information.
Communications: email correspondence with support, responses to optional feedback requests.
3. How We Use Your Data
To provide the Platform: account management, personalised intelligence delivery, billing, service notifications.
To improve the Platform: usage pattern analysis; signal and scoring model calibration using aggregated anonymised data only.
Legal basis (GDPR): contract performance, legitimate interests, legal obligation, and consent where separately requested.
4. Data Sharing
We do not sell your data. Processors:
- Supabase — database and authentication (EU data hosting)
- Vercel — application hosting
- Payment processor — billing data only
- Anthropic and OpenAI — AI brief generation only (see clause 5)
- Law enforcement where required by law
All processors bound by data processing agreements.
5. AI Processing
Our systems are designed to avoid sending personal data to AI providers. Prompts contain only procurement context, tender data, and anonymised analytical inputs — not user names, email addresses, or other personal identifiers. AI-generated outputs are not stored by the AI provider; Civant retains them subject to normal retention rules.
6. Data Retention
- Active account data: subscription duration plus 30 days post-cancellation
- Billing records: 7 years (Irish tax/accounting obligations)
- Anonymised analytics: indefinite
- Support correspondence: 3 years
7. Your Rights
Under GDPR: access, rectification, erasure, objection, restriction, portability, withdrawal of consent. Contact hello@civant.eu. Response within 30 days. Complaints to the Irish Data Protection Commission at dataprotection.ie.
8. Cookies
Strictly necessary cookies for authentication and session management only. No advertising or tracking cookies on the Platform. Marketing website may use analytics cookies with your consent via the cookie banner.
9. Security
Encrypted data storage, row-level security, HTTPS-only access, regular security reviews.
10. International Transfers
Data primarily stored within the EU (Supabase EU region). Where transferred outside the EU/EEA, appropriate safeguards in place per GDPR Chapter V.
11. Changes
Material changes communicated by email or in-Platform notice.
12. Contact
Civant Technologies Limited, Ireland · hello@civant.eu
