Privacy Notice

This Privacy Notice explains how BidHits collects, uses, stores, shares and protects personal data of its users.

BidHits is operated by PORTAL GENIAL SERVICOS EM TECNOLOGIA DA INFORMACAO LTDA, a company based in Brazil, CNPJ 06.098.898/0001-69, with address at R. Jose Formighieri, 399, Alvorada, CEP 89562-008, Videira - SC - Brazil.

This Notice applies to the website, logged area, e-mail alerts, API, tender search tools, map, artificial intelligence features, support and other services offered by BidHits.

For users in India, we follow the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and other applicable laws. We may also comply with Brazilian legal obligations when required because the company is based in Brazil.

Personal data we collect

We may collect data provided by the user, such as name, company name, tax or business identification, e-mail, phone, address, billing data, payment information, messages sent to support and information entered in forms.

We may also process data generated by use of the service, such as keywords, filters, regions of interest, searches, viewed tenders, favorites, deleted items, comments, AI interactions, API usage, preferences, access records, IP address, device identifiers, browser, accessed pages, date and time of use.

When card payment is available, BidHits does not store the full card number. We may store identifiers or tokenized data provided by payment providers when needed for billing, renewal, fraud prevention or financial control.

BidHits does not request sensitive data such as health data, biometric data, passwords of third-party services, political opinions, religion, sexual life or similar information. The user must not enter this type of data in comments, support messages, AI interactions or other fields of the service.

The user must provide only true, accurate and lawful information, and must not impersonate another person or provide third-party data without proper authorization.

How we use personal data

We use personal data to create and manage accounts, provide access to the service, process subscriptions, payments and renewals, send tender alerts, enable searches, filters, favorites, comments, map, API and other contracted features.

We also use data to personalize results, improve the relevance of opportunities, operate artificial intelligence features, answer questions, provide support, prevent fraud, protect the security of the system, comply with legal obligations, keep operational records and defend our rights.

We may send operational e-mails related to the service, such as tender alerts, account notices, support, billing, renewal, security and relevant changes.

We may also send commercial communications about BidHits, updates, offers and related content. The user may unsubscribe from promotional messages using the unsubscribe link in the e-mails or by contacting bidhits@bidhits.in.

We process personal data for lawful purposes, including consent, voluntary provision of data for requested services, performance of the service, legal obligations, security, fraud prevention, exercise of rights and other legitimate uses permitted by applicable law.

When consent is the basis for processing, the user may withdraw it through the available settings, unsubscribe links or by contacting bidhits@bidhits.in. Withdrawal does not affect processing already carried out before the request and may limit the use of some services.

Artificial intelligence

BidHits may use artificial intelligence to improve searches, suggest opportunities, organize information, assist with tender documents and answer user questions about public procurement processes.

AI interactions may be processed by our own systems or by contracted technology providers, with appropriate security and confidentiality measures.

AI answers are for support and information only. The user must check tender notices, official portals and original documents before making any commercial, legal, technical or financial decision.

The user must not enter sensitive data, confidential information, third-party data without authorization or content that the user does not want to share with BidHits for service provision and improvement.

Sharing and public sources

BidHits does not sell personal data.

We may share data with providers needed to operate the service, such as hosting, infrastructure, security, e-mail delivery, payment processing, support, analytics, advertising, accounting, tax, fraud prevention, legal services and artificial intelligence tools.

These providers must process personal data according to our instructions, applicable contracts and data protection law.

We may also share data to comply with legal obligations, orders from competent authorities, defense of rights, fraud investigation, abuse prevention, unauthorized access investigation or violation of the Terms of Use.

BidHits indexes and organizes public procurement information made available by public portals and official sources. Tender documents may contain public personal data of public agents, bidders or other persons. We process this information only to provide search, alert, transparency and procurement information services.

The use of BidHits may direct the user to public portals, tender pages and third-party websites. These external websites have their own privacy rules and are not controlled by BidHits.

Cookies, analytics and advertising

We use cookies and similar technologies to keep users logged in, remember preferences, protect accounts, measure audience, understand use of the service, improve features and, when applicable, display or measure advertising.

We may use third-party tools, such as Google Analytics, Microsoft Clarity and similar technologies, for navigation analysis, performance, heat maps, statistics and product improvement.

Data such as IP address, identifiers, accessed pages, usage events, browser, device and approximate location may be processed by these tools. When this data can identify an individual, it is treated as personal data.

The user may configure the browser to block cookies, but some features of the service may not work properly.

More information about disabling Google Analytics is available at https://tools.google.com/dlpage/gaoptout/. The Microsoft Privacy Statement is available at https://privacy.microsoft.com/privacystatement.

Retention

We keep personal data for as long as necessary to provide the service, manage the account, perform contracts, send alerts, process payments, provide support, comply with legal obligations, maintain security, prevent fraud and defend rights.

Access records, processing logs, traffic data and other operational records may be kept for at least one year when required by Indian data protection rules, and for longer periods when required by law, security, audit, investigation, accounting, tax obligations or defense of rights.

After account closure or after the purpose has been fulfilled, data may be deleted, anonymized or kept when there is a valid legal reason, such as legal obligation, fraud prevention, audit, dispute, security or exercise of rights.

Residual copies may remain in backups for a limited period until secure replacement or deletion.

Data rights and complaints

Users in India may request information about the personal data processed by BidHits, access to a summary of such data, correction, completion, update, erasure when applicable, withdrawal of consent and nomination of another person to exercise rights in case of death or incapacity.

To exercise rights or submit a privacy grievance, contact bidhits@bidhits.in and inform the request and the data needed to identify the account.

For security, we may request additional information to confirm the identity of the requester or legal representative before answering the request.

We will respond to requests and grievances within the period required by applicable law, normally within a maximum of 90 days when this period applies.

Some data may be retained when necessary for legal obligations, service provision, security, fraud prevention, dispute resolution, accounting, tax, audit or defense of rights.

Before making a complaint to the Data Protection Board of India, the user should first use our grievance channel. If the issue is not resolved, the user may contact the Data Protection Board of India when permitted by law.

Children and young users

BidHits is intended for professional users, companies and people interested in public procurement. It is not directed to children.

We do not knowingly collect personal data from children. Under Indian law, a child is generally an individual under 18 years of age.

If we become aware that a child has provided personal data without proper authorization, we may delete the data, restrict the account or take other appropriate measures.

We do not intentionally carry out targeted advertising directed at children, nor behavioral monitoring of children.

Security and incidents

We adopt technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, disclosure or improper processing.

We use resources such as secure HTTPS connection, access controls, monitoring, logs, backups and other measures proportional to the risks and nature of the data processed.

No system is completely risk-free. The user must also protect passwords, API keys, devices and e-mail accounts, avoiding credential sharing or unauthorized use.

If a personal data breach occurs, we will assess the incident and, when required by applicable law, notify affected users without delay and notify the Data Protection Board of India within the required period, including detailed information within 72 hours when this period applies.

International transfers

Because BidHits is operated by a company based in Brazil and may use international providers, personal data may be processed in Brazil, India or other countries.

We will take reasonable measures to protect personal data in international transfers and will comply with restrictions or requirements that may be issued by the competent authorities in India or other applicable laws.

If a law or authority restricts the transfer of certain data outside India, we may adjust our systems, providers or processing practices to comply with that requirement.

Data Fiduciary and contact

Data Fiduciary and service operator:

PORTAL GENIAL SERVICOS EM TECNOLOGIA DA INFORMACAO LTDA

CNPJ 06.098.898/0001-69

R. Jose Formighieri, 399, Alvorada, CEP 89562-008, Videira - SC - Brazil

E-mail: bidhits@bidhits.in

Person responsible for privacy questions and grievance redressal:

Marcelo Emmel

E-mail: bidhits@bidhits.in

Changes to this Notice

BidHits may change this Privacy Notice to reflect changes in the service, law, technology or our data processing practices.

When relevant changes occur, we may inform users by e-mail, website notice or another appropriate channel.

The current version will always be the one published on this page.

Last update: 28/04/2026.