Privacy policy

Last updated 12 October 2026.

This privacy policy explains how Webzworld (“we”, “us”), the operator of Grovia Tender at groviatender.com and app.groviatender.com (the “Service”), handles personal data and business information. Grovia Tender is software: we never log in to a procurement portal or submit anything on one for you, and we never hold or pay tender-related money on your behalf. This policy is written to comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who we are

Webzworld is the data fiduciary for personal data processed through the Service. Registered office: Webzworld, sole proprietorship firm of Jitendra Desai, 1318, Navjivan Commercial Society, Lamington Road, Mumbai Central, Mumbai 400008, Maharashtra, India. Contact for privacy matters: info@groviatender.com.

2. What we collect

• Account data: name, work email, phone number, password (stored hashed), organisation name and role.
• Company data you provide: company profile (“Company DNA”), financial figures, certifications, project history, personnel details, and documents you upload to your vault (for example GST, Udyam, ISO certificates, work orders, financial statements).
• Tender and proposal data: tender documents you upload or import, analyses, proposal drafts, pricing you enter, outcomes you record.
• Usage and technical data: log data, IP address, browser type, device information, pages visited, actions taken, and audit trails of sensitive actions.
• Enquiries: details you submit on our contact form (name, company, email, phone, message).
• Payment data: billing name, address, GSTIN, payment request references, and the UTR and payment proof screenshot you submit after paying by bank transfer or UPI. Payment proof screenshots and UTRs are stored only to reconcile your payment. We do not collect or store card details.

3. Why we process it

• To provide the Service: matching tenders to your company, checking eligibility, drafting proposals from your documents, assembling submission packs.
• To operate your account: authentication, team invitations, roles, notifications you enable (in-app and email).
• To bill you and issue GST-compliant invoices.
• To keep the Service secure: audit logs, abuse prevention, malware scanning of uploads.
• To improve the Service using aggregated, de-identified usage statistics.
• To build shared market intelligence from public facts, including, unless you switch it off, the bare award fact when you record a lost tender (see section 4A).
• To respond to your enquiries and provide support.
• To comply with law and enforce our terms.

We process personal data on the basis of your consent given at sign-up, for the performance of our contract with you, and for legitimate uses recognised under the DPDP Act. You may withdraw consent at any time by closing your account; withdrawal does not affect processing already carried out.

4. AI processing

The Service uses third-party AI models to read documents, extract facts, assess eligibility and draft text. Only the content required for the task you request is sent, over encrypted connections, to providers bound by contractual terms that prohibit them from using your data to train their models. We do not use your documents, proposals or outcomes to train AI models, and we never expose one customer’s data to another, apart from the anonymous award fact described in section 4A. Every AI call is logged and linked to its output so it can be audited.

4A. Market intelligence from recorded results

Buyer profiles show who wins a buyer’s contracts. Public award notices are patchy, so when you record that you lost a tender from our public catalogue to a named company, that award fact (the buyer, the winning company, the winning amount and the date) joins the shared market data that every customer sees. It is shown as “reported anonymously by a Grovia Tender user”: your organisation’s name, your bid, your price and your notes are never shared.

• Only losses are shared. A win would name you as the winner, so it is never shared.
• Only tenders from our public catalogue. A tender you uploaded privately is never shared, not even its title.
• Only companies. If the winner’s name reads as a person’s, nothing is shared.
• Only results recorded from 10 October 2026, or from when you last switched sharing on. Nothing recorded earlier is ever used.
• An owner or admin can switch it off at any time in Settings → Organisation. Facts already shared stay, because they are facts about the buyer and carry nothing identifying you.

4B. Requirements you post as a buyer

When you post a requirement (at groviatender.com/post-requirement or in the app), we keep your name, company, e-mail and phone privately, to confirm your e-mail, to check the requirement is genuine (automatic checks on the text you want suppliers to see, and our team where a check needs a person; your contact details are never sent to an outside AI service for this), and to send you the responses. Suppliers see only what you need, how much, where and by when (and your budget, if you gave one), never your contact details. Once approved, the same facts (what you need, how much, where, by when and the category) also appear on a public page at app.groviatender.com/wanted so more suppliers can find it; your budget and your company name appear there only if you tick the box for each, and your name, e-mail and phone never do. A closed or expired requirement's page says so and is hidden from search engines. When a supplier responds, we e-mail you their details and message; your contact is shared only with the suppliers you choose to reply to, and only because you reply. Suppliers who respond agree that their own name, company, e-mail and phone are sent to that buyer. To have a requirement taken down or your details deleted, write to info@groviatender.com.

4C. Stories you choose to share

If you choose to share a story about a tender you won, we publish only what you approve on the consent form (your company name and logo, or an anonymous description such as ‘a steel fabricator in Pune’) on our website, after our team reviews it. You can withdraw it at any time in Settings, and we remove it from the website straight away.

5. Where data is stored

Data is stored on infrastructure operated by Webzworld and its hosting providers, with document storage in the Asia-Pacific (Mumbai) region. Data may be processed by AI and email providers outside India solely to deliver the Service, subject to the safeguards above and applicable law.

6. Sharing

We do not sell personal data. We share it only with: members of your own organisation according to their role; service providers who process it on our instructions (hosting, storage, AI models, email delivery); our bank, only to receive and refund your payments; and authorities where required by law. Tender documents you upload stay private to your organisation. If, when uploading the documents of a publicly advertised tender, you tick ‘share with all subscribers’, those documents and their analysis become available to other Grovia subscribers, shown as ‘shared by a Grovia member’, never with your company’s name. Documents of your own private tenders are never shared, and nothing is ever sent to tender sources. The only things that reach other customers are the anonymous award fact in section 4A and the facts of a requirement you post (section 4B, including its public page), never your contact details.

7. Security

Tenant isolation at the database level, encryption in transit and at rest, short-lived signed URLs for documents, role-based access, audit logging, rate limiting, malware scanning and optional multi-factor authentication. See our security page. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the Data Protection Board of India as required.

8. Retention

Account and organisation data is kept for as long as your account is active. After closure, we delete or anonymise it within 90 days, except where retention is required by law (for example tax records for invoices, retained for the statutory period) or to resolve disputes. Audit logs are retained for up to two years.

9. Your rights

Under the DPDP Act you may access a summary of your personal data, correct or update it, request erasure, nominate a person to exercise your rights, and raise a grievance. You can update your profile and organisation details in Settings; for everything else, including erasure or an export of your data, write to info@groviatender.com. We respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India.

10. Cookies and analytics

The marketing website sets no tracking cookies and loads no third-party scripts. The application uses strictly necessary cookies and local storage for sign-in and preferences. We do not use advertising trackers.

11. Children

The Service is intended for businesses and their staff. We do not knowingly collect data from anyone under 18.

12. Changes

We will post any changes to this policy on this page and, for material changes, notify account holders by email at least 15 days before they take effect.

13. Grievance officer

Name: Jitendra Desai. Email: info@groviatender.com. Address: Webzworld, sole proprietorship firm of Jitendra Desai, 1318, Navjivan Commercial Society, Lamington Road, Mumbai Central, Mumbai 400008, Maharashtra, India. Grievances are acknowledged within one working day and resolved within 30 days.