Privacy notice

Account data: your email address, and your name and company if you give them. Your password is stored only as a salted scrypt hash; we never see it.

Team and pipeline data: who is in your organisation, what contracts you track, who they are assigned to, and the activity log of changes.

Billing data: handled by Stripe. Card details never reach our servers. We store your Stripe customer reference, plan and renewal date.

Enquiries: what you send us about a bid, so we can reply and quote.

Information about public bodies and their suppliers comes from published procurement notices, not from you.

To provide the service and to bill you, because we have a contract with you. To keep the service secure and to reply to enquiries, because we have a legitimate interest in running it properly. To send service emails about your account, on the same basis. We will only send marketing email if you ask for it, and you can stop it at any time.

Vercel (hosting), Prisma Data Platform (database), Stripe (payments), Resend (email) and Google (the spreadsheet our team works enquiries from). Each is bound by a data processing agreement and may only act on our instructions. Some process data outside the UK under appropriate safeguards. We do not sell your data to anyone.

Account and pipeline data for as long as your account is open, and for 30 days after you close it so it can be restored if you change your mind. Records we need for tax, including invoices, are kept for six years. Bid enquiries are kept for two years.

We set one essential cookie to keep you signed in, and one to remember which organisation you are working in. Neither is used for advertising, so no consent banner is needed for them. Your light or dark theme choice is stored in your own browser and never reaches us. The cookie policy names every one.

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Email support@contractwindow.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first.