Privacy Policy

1. Introduction & Scope

Welcome to CONTRACQ ("we", "our", "us", or "Platform"), operated via https://contracq.in. CONTRACQ provides AI-powered government tender aggregation, public procurement analytics, contractor surveillance, and bid intelligence services across India.

This Privacy Policy outlines our standards, practices, and policies regarding the collection, storage, processing, and disclosure of personal data and corporate intelligence when you access our platform, use our search engines, subscribe to intelligence feeds, or interact with our APIs.

2. Sourcing of Government Procurement Data (Open Data Transparency)

CONTRACQ indexes and organizes publicly published government procurement notices, corrigenda, BOQ schedules, and bid award results from authorized electronic procurement platforms across India (including central GePNIC portals, state eProcurement systems, Indian Railways IREPS, Defense CPPP, and Municipal portals).

In compliance with the Right to Information Act (RTI Act 2005) and Government of India Open Data policies, public procurement notices published by state authorities are public records. Contractor corporate names, bid status classifications, and contract award values displayed on CONTRACQ originate from these public government gazettes and disclosures.

3. Information We Collect from Users

• Account Registration Data: When creating a CONTRACQ account, we collect your full name, business email address, company name, phone number, and hashed authentication credentials.
• Single Sign-On (Google OAuth): If you authenticate via Google Single Sign-On, we receive your verified email, display name, and avatar URL in accordance with Google's OAuth 2.0 protocol. We never receive or store your Google account password.
• Search & Intelligence Queries: Search strings, filter configurations (states, categories, financial ranges), saved tender dossiers, and bidder watchlist entries.
• Billing & Payment Metadata: When purchasing Pro or Enterprise subscriptions, transactions are processed securely by our PCI-DSS certified payment partner, Razorpay. CONTRACQ stores payment verification IDs, subscription status, and billing cycle dates. We do not store credit/debit card numbers or bank account passwords on our servers.
• Technical & Telemetry Data: IP addresses, browser fingerprint, session authentication cookies, device operating system, and API access timestamps for fraud prevention and rate limiting.

4. How We Use Your Information

5. Third-Party Sub-Processors & Data Sharing

We do not sell, rent, or trade your personal data. We disclose data strictly to vetted service providers essential for platform operations:

• Razorpay Software Pvt. Ltd.: Payment gateway for processing Indian UPI, NetBanking, and credit/debit card transactions.
• Google LLC (Google Identity): OAuth 2.0 authentication service.
• Oracle Cloud Infrastructure (OCI) & Tier-IV Data Centers: Isolated server hosting, automated backups, and encrypted database clusters situated in India.
• Statutory Authorities: Disclosures mandated by valid law enforcement requests or judicial orders pursuant to the Information Technology Act, 2000.

6. Data Subject Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, 2023, you retain sovereign rights over your personal data:

• Right to access a summary of your personal data processed by CONTRACQ.
• Right to correction, completion, and updating of inaccurate data.
• Right to erasure of account data when the account is closed.
• Right to grievance redressal through our designated Grievance Officer.

7. Grievance Redressal & Contact Information

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act 2023, the details of our Grievance Officer are: