Privacy Policy

1. Who We Are

Civant Technologies Limited is the data controller for personal data collected through app.civant.eu and civant.eu. Incorporated in Ireland, subject to the EU GDPR and Irish Data Protection Acts. Contact: hello@civant.eu

2. Data We Collect

Account and Profile Data: name, email, job title, company name/size/country/sector, CPV preferences, target markets, billing name and address (card data processed by payment provider, not stored by us).

Usage Data: searches, alert configurations, competitor tracking, AI brief requests, login timestamps, session data, feature usage, IP address, device/browser information.

Communications: email correspondence with support, responses to optional feedback requests.

3. How We Use Your Data

To provide the Platform: account management, personalised intelligence delivery, billing, service notifications.

To improve the Platform: usage pattern analysis; signal and scoring model calibration using aggregated anonymised data only.

Legal basis (GDPR): contract performance, legitimate interests, legal obligation, and consent where separately requested.

4. Data Sharing

We do not sell your data. Processors:

• Supabase — database and authentication (EU data hosting)
• Vercel — application hosting
• Payment processor — billing data only
• Anthropic and OpenAI — AI brief generation only (see clause 5)
• Law enforcement where required by law

All processors bound by data processing agreements.

5. AI Processing

Our systems are designed to avoid sending personal data to AI providers. Prompts contain only procurement context, tender data, and anonymised analytical inputs — not user names, email addresses, or other personal identifiers. AI-generated outputs are not stored by the AI provider; Civant retains them subject to normal retention rules.

6. Data Retention

• Active account data: subscription duration plus 30 days post-cancellation
• Billing records: 7 years (Irish tax/accounting obligations)
• Anonymised analytics: indefinite
• Support correspondence: 3 years

7. Your Rights

Under GDPR: access, rectification, erasure, objection, restriction, portability, withdrawal of consent. Contact hello@civant.eu. Response within 30 days. Complaints to the Irish Data Protection Commission at dataprotection.ie.

8. Cookies

Strictly necessary cookies for authentication and session management only. No advertising or tracking cookies on the Platform. Marketing website may use analytics cookies with your consent via the cookie banner.

9. Security

Encrypted data storage, row-level security, HTTPS-only access, regular security reviews.

10. International Transfers

Data primarily stored within the EU (Supabase EU region). Where transferred outside the EU/EEA, appropriate safeguards in place per GDPR Chapter V.

11. Changes

Material changes communicated by email or in-Platform notice.

12. Contact

Civant Technologies Limited, Ireland · hello@civant.eu