Privacy Policy

We never sell your data. It is used only to make your proposals and run your account, and is shared only with the service providers listed in section 4.

By creating an account or using pkbid you agree to this policy. pkbid is for businesses and people aged 18 or over.

1. Who is responsible

Hadique Tahir, a sole proprietor (business not yet registered), Islamabad, Pakistan, operates pkbid and is responsible for your data. Questions: hadiquetahir@gmail.com.

2. What we collect

• Account: your email address and sign-in details (email and password, or Google sign-in).
• Company profile: what you enter during onboarding and on the Company page, such as company name and contacts, registrations (for example NTN, STRN, SECP, PEC), past projects, team, equipment, finances and declarations. If you enter information about other people (for example your staff and their CVs), you confirm you are entitled to provide it.
• Proposal inputs and outputs: the tenders you choose, your price schedules (including Excel files, which are read in your browser), your answers to follow-up questions, and the documents drafted for you.
• Billing: your plan and credits, and payment records: for bank transfers, the amount, date and the screenshot and messages you send us on WhatsApp (including your phone number); for card payments, the payment reference and status from Safepay. We do not receive your card details.
• Service records: logs of your proposal runs (when they ran, whether they succeeded, their cost) and error records, kept to run and fix the service.

3. How we use it

• To run your account and draft your proposals.
• To manage plans, credits and payments.
• To keep the service secure, fix problems and measure cost and quality.

We do not sell your data and do not use it for advertising. Your company profile, prices and proposals are visible only to you, and are never shown to other pkbid users. Our team can view your account data when needed to give you support, check a payment or investigate misuse.

4. Service providers that run pkbid

Your data is handled only by the providers below, only to run pkbid for you. We share it with no one else.

• Google Firebase: sign-in and the database that stores your profile and proposals.
• n8n: the automation service that runs proposal drafting and billing.
• Google Gemini API: AI models that read tender documents and draft your documents. Your profile details and prices are sent to it for this. We use Google’s paid API service.
• WhatsApp: the messages and payment screenshots you send us when paying by bank transfer.
• Our bank: receives your bank transfer and its sender details.
• Safepay: card payment processing, when card payments are available.

These providers may process data outside Pakistan, under their own terms and privacy policies. We may also disclose data where the law requires it, or to a buyer if pkbid is sold, who would be bound by this policy.

5. Cookies and browser storage

pkbid stores your sign-in session in your browser and uses one small cookie to remember whether the sidebar is open. We do not use advertising or tracking cookies.

6. How long we keep it

We keep your profile and proposals while your account is open, and delete them when you delete your account (see below). Payment and billing records are kept for as long as needed for accounting, tax and dispute purposes, even after an account is deleted. Service records are kept only for a limited time.

7. Deleting your account

You can request deletion of your account from Settings. Within 30 days we permanently delete your account and the data stored in it, including your company profile and proposals, and confirm by email. Deleted data cannot be recovered, and any unused credits are lost. The exceptions are payment records (see section 6) and copies in provider backups, which are removed on their normal cycle.

8. Your other choices

• You can view and correct your company profile at any time on the Company page.
• For a copy of your data, a correction, or any other privacy request, contact hadiquetahir@gmail.com. We reply within 30 days.

9. Security

Access to your data is limited to your signed-in account, and requests to our servers are checked against your sign-in. No system is perfectly secure; tell us at once if you suspect misuse of your account. If a breach affects your data, we will tell you promptly.

10. Changes

We will post any changes on this page and update the date above. For significant changes we will also notify you by email or in the app.