Last updated 1 July 2026 · aligned to India's Digital Personal Data Protection Act, 2023
This policy explains what BidMantra (operated by Velura Labs, the “Data Fiduciary”) collects when you use our GeM bidding co-pilot, why we collect it, and the rights you hold over it. We collect the minimum needed to do the job well.
1. What we collect
Business profile — company name, Udyam / MSME and DPIIT status, GSTIN, PAN, turnover, product categories and OEM authorisations you share, so we can match tenders and check eligibility.
Contact details — your name, phone / WhatsApp / Telegram handle and email, to deliver matches, verdicts and alerts on your chosen channel.
Usage data — which tenders you view, request analysis on, or bid; used to improve matching for your account only.
Public tender data — GeM bid information that is already public. We do not scrape private or restricted data.
We do not collect or store your Digital Signature Certificate (DSC), and we never automate your bid submission.
2. Why we use it
To match you with relevant tenders and generate GO / NO-GO analysis and bid drafts.
To send deadline, corrigendum and EMD reminders on your chosen channel (WhatsApp, Telegram, Email or SMS).
To operate billing, support and your account.
We process your data on the basis of the consent you give at sign-up and to perform the service you asked for. We do not sell your data, and we do not share pricing intelligence between customers.
3. One bidder per tender
To keep procurement fair and avoid conflicts of interest, we support only a single customer on any given tender. Your profile and bid data are never used to advantage another customer against you.
4. Who we share with
Only trusted processors that help us run the service (cloud hosting, messaging providers (WhatsApp, Telegram, SMS, email), payment providers), under contract and only for the purposes above. We may disclose data where required by law.
5. How long we keep it
For as long as your account is active, plus the period we're legally required to retain records. You can ask us to delete your data at any time, subject to those legal obligations.
6. Your rights
Access, correct or update your personal data.
Withdraw consent and request erasure.
Nominate a representative to exercise your rights.
Raise a grievance with our Data Protection contact, and escalate to the Data Protection Board of India.
7. Security
We use encryption in transit, access controls and data minimisation. No system is perfectly secure, but we treat your commercial data as confidential.
8. Contact
Grievance / Data Protection Officer: privacy@bidmantra.in. We aim to respond within the timelines set out under the DPDP Act.
This template is provided for design purposes and is not legal advice. Have counsel review and finalise it — including your registered entity details and DPDP grievance officer — before publishing. BidMantra is independent and not affiliated with GeM SPV / Government of India.