Privacy Policy

Coordinate Traders (sole proprietorship, NTN 4550438010283), which operates BIDOROS. Contact: privacy@bidoros.com.

Account. Your name, email address, phone number, password (stored only as a hash by our authentication provider), city and province.

Business. Business name, category, year established, team size, NTN, sales tax registration, description, website and office locations.

Documents you upload. These are the most sensitive things we hold, so they are listed rather than summarised: business registration, NTN and sales tax certificates, chamber of commerce membership, provincial revenue registration, active taxpayer status, professional tax certificates, ISO certificates, company profiles, past work orders, CNIC images (front and back) and bank statements used to evidence turnover.

Activity. Tenders, bids, contracts and their history, invoices and recorded payments, meetings and their notes, messages, and notifications.

Technical. Standard log data from our hosting provider, and anonymous usage analytics.

We do not receive or store card numbers. Payment details are entered on Safepay’s own page; we are told only whether a subscription is active and when its period ends.

• To run your account and let you sign in.
• To let buying organisations assess you — your profile, documents and score are what a tender is scored against. This is the core purpose of the platform.
• To operate contracts, invoices, meetings and messaging between you and your counterparties.
• To take the vendor subscription payment and know whether it is current.
• To meet legal, tax and accounting obligations in Pakistan.
• To detect fraud and misuse.

Other users. A buying organisation you bid to can see your business profile, your BIDOROS Score and the documents its tender required. Your counterparty on a contract sees that contract, its history and its invoices. Your bid cannot be read by the buyer until the tender deadline has passed — that is enforced by database rules, not by the interface.

Service providers. We use a small number, and only these:

• Google (Firebase) — hosting, authentication, database, file storage and analytics.
• Safepay — subscription payments. They receive your email and the amount; we never receive your card details.
• Daily.co — video meetings, when you hold one.
• An email delivery provider — for password resets and notifications.

We do not sell your data, and we do not share it for advertising.

We may disclose data where required by law, by a court, or by a regulator with authority to demand it.

On Google Cloud infrastructure. The database is hosted in the United States and the application in Singapore, so your data is processed outside Pakistan. By using BIDOROS you consent to that transfer.

Direct one-to-one messages are encrypted so that their contents are not readable from our database. Group conversations, meeting notes and in-meeting chat are not encrypted in this way.

Be aware of a real limitation: encryption keys are held in your own browser. If you clear your browser data or sign in on a new device, previously encrypted messages may become unreadable to you. Do not rely on message history as your only record of anything important.

While your account is open, and afterwards only where we are required to — tax and accounting records, principally.

You can delete your account yourself from Settings. That removes your profile, documents and uploaded files, bids, invoices, contracts and their history, messages, meetings and your sign-in. Two things it does not remove, and it is better to know now:

• A counterparty's own copy of a completed contract stays in their records, as their proof of the work.
• Messages you sent remain visible to the people you sent them to until their own conversations are removed.

Deletion is not reversible and support cannot restore an account afterwards.

• Access and correct — most of your data is editable in your profile and settings.
• Delete — from Settings, subject to outstanding work being resolved first.
• Notification preferences — choose which events reach you, and where.
• Privacy settings — control whether your profile is discoverable and what contact details are shown.

For anything you cannot do yourself, write to privacy@bidoros.com.

We use a session cookie to keep you signed in and to route you to the right part of the platform. Your browser’s local storage holds your encryption keys and small interface preferences. We do not use advertising or third-party tracking cookies.

Access to data is enforced by server-side database rules rather than by the interface alone. Connections use TLS. Two-factor authentication is available and we recommend enabling it.

No system is perfectly secure. If you believe your account has been compromised, change your password and contact us immediately.

BIDOROS is for businesses. It is not intended for anyone under 18 and we do not knowingly collect their data.

We will give notice of material changes by email or in the platform before they take effect.

Coordinate Traders, Shop No. 7 & 11, Sector 01, Arif Builder, Arslan Town 04, Township, Sukkur, Sindh, Pakistan.
Phone: +92 346 8266660
privacy@bidoros.com