Privacy policy

1. What we collect

We collect only what we need to run the service:

• Account details: your name, work email, company name, and phone number when you sign up or book a call.
• Tender data: the take-offs, drawings, packages, tenders, quotes, and messages you upload or create in the workspace.
• Usage data: technical logs and analytics (pages visited, actions taken, approximate location by country, device, browser, and how quickly pages loaded) that help us keep the service working and improve it. This includes session recordings — see “Cookies, analytics and session recording” below.

2. How we use it

We use your information to run the tendering workflow: to store your tenders, put them in front of suppliers, collect the quotes that come back, and level them for you. We also use it to contact you about your account and requests, and to improve the product.

3. Cookies, analytics and session recording

We use two analytics tools, and we would rather tell you plainly what they do than bury it.

• Vercel Analytics counts visits and page loads and reports aggregate figures — how many people came, which pages they read, which country and device they came from, and how fast pages loaded. It does not use cookies and does not identify you personally.
• Microsoft Clarity records how pages are used: where you click and scroll, and a replay of your interactions with the page. It sets cookies and an identifier so it can tell one visit from another. This is behavioural, not personal profiling — we use it to find broken and confusing parts of the product, not to build a picture of you. It only runs if you accept it: we ask on your first visit, and until you say yes it does not load at all.
• Inside the tendering workspace, every piece of text is masked before a recording leaves your browser. We can see that a button was clicked or a table was scrolled; we cannot read your rates, quantities, supplier names, or quoted figures in a recording. This is enforced in our code, not only in a settings page.
• Clarity is opt-in: decline the banner and it never loads. If your browser already sends Global Privacy Control or Do Not Track we treat that as a decline and do not ask. An ad/tracking blocker also works. None of this affects your ability to use the service. To change your mind later, clear this site’s data in your browser and the question will be asked again.

4. What we never do

Some things are off the table, full stop:

• We never sell your data.
• We never make your rates, estimates, or quotes public. Suppliers bidding on a tender see the scope and quantities, never your numbers or other bidders’ numbers.
• We never share your data across organisations. Every workspace is scoped to your own company.

5. Where it lives and how it is protected

Your data is stored in secured cloud databases with access scoped per organisation, and is encrypted in transit. Our primary hosting and database run in the EU (Frankfurt).

A small number of trusted processors help us run the service: Vercel (hosting and analytics), Neon (database), Clerk (authentication), and Microsoft (Clarity analytics). They process data on our behalf under their own data-processing terms and cannot use it for their own purposes. Microsoft Clarity processes analytics data outside the EU, including in the United States.

6. How long we keep it

We keep your data for as long as your account is active. If you want your account and its data deleted, email us and we will do it.

7. Changes to this policy

Inframat is an early-stage product and this policy will evolve with it. When it changes, we update this page and the date at the top. Material changes will be flagged to account holders by email.

8. Contact us

Questions, requests, or deletions: email aleksandrov.hse@gmail.com or message us on WhatsApp via the Need help? button. We read every message.