Privacy Policy

Effective date: 10 August 2026

Chardi AI, Inc. (“Chardi”, “we”, “our”, or “us”) operates the AI platform at chardi.ai (the “Platform”). This policy sets out what we collect, why, who sees it, and what you can ask us to do about it. By registering, creating a profile, or using any part of the Platform, you agree to it.

1. Information we collect

a. Company identification

• Company name, registered address, and contact details
• Registration and tax identifiers you provide
• Names and roles of the people at your company who use the Platform

b. Business and financial information

• Turnover for recent financial years
• Past contracts, including client, value, scope, and dates
• The states or regions you operate in

c. Certifications and registrations

• MSME, ISO, and sector-specific certifications, with expiry dates
• Any local content class you declare

d. Documents and contacts

• Files you place in your Compliance Vault, and the tags you add
• Buyer-side contacts you save against an opportunity

e. Platform usage

• Account email, with sign-in handled by our identity provider
• Activity and error logs, for security and diagnostics

To save you typing, we draft part of your profile from sources that are already public, including your own website and published award records, then ask you to correct it.

2. Purpose of data collection

• To find tenders, grants, and RFPs that match your company
• To assess your eligibility against each requirement
• To help you draft submissions
• To send the alerts and digests you ask for
• To secure accounts, bill paying customers, and meet legal obligations

Where the law asks for a legal basis, ours is our contract with you, our legitimate interest in running and securing the Platform, your consent where we ask for it, and legal obligation where it applies.

3. Confidentiality of your vault

• Your vault works for your company alone
• We do not pool it with other customers' documents
• We do not use it to improve anyone else's results
• We do not use it to train shared or public AI models
• No other customer can see or search anything in it
• Staff access is limited to the few people who need it to run the service or answer your support request

4. Use of artificial intelligence

We use AI to read tender documents, extract your profile, score eligibility, and draft proposals. Document text is processed by AI services under contract with us, on terms that forbid training on your content. Scores and drafts are decision support, not legal or procurement advice. Check requirements, deadlines, and figures against the official tender documents before you act or submit.

5. Data storage and security

• Data is encrypted in transit and at rest
• Access is scoped to your organization, so one customer cannot reach another's records
• Administrative access is limited and authenticated
• If a breach puts your data at risk, we will tell you without undue delay

6. Where we process data

In the United States. We do not currently offer Indian data residency. We run one service in India, but it only collects tender notices that governments have already published, because several Indian portals accept Indian connections only. It holds no customer data.

If you are in the UK, the EEA, or India, your data therefore leaves your home jurisdiction. We offer a data processing agreement incorporating the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. Ask for it before you send us anything.

7. Data sharing

We do not sell your data and we do not give it to advertisers. It reaches service providers who act on our instructions, in five categories: cloud hosting and AI processing, authentication, email delivery, payments, and error monitoring. Email us for the current list. We also disclose where the law requires it, or to a buyer if the company is acquired.

8. Data retention

• We hold your data while your account is open
• Delete your account in Settings and we erase your user record and activity
• Your organization's profile, pipeline, and documents remain, because your colleagues still use them
• To erase a whole organization including its stored documents, email us and we will do it
• A document you delete from your vault is removed when you delete it
• We keep billing records and a log of deletion requests for longer, because we must

9. Your rights

• Request a copy of the data we hold about you
• Correct anything that is wrong or out of date
• Delete your account and ask us to erase your content
• Object to or restrict how we use it

We honor requests under the GDPR and UK GDPR, the CCPA in California, and the Digital Personal Data Protection Act, 2023 in India, where the contact below also serves as our grievance officer. We respond within 30 days. If our answer does not satisfy you, you may complain to your data protection authority. Where we hold documents on behalf of your employer we act on their instructions, so ask them first and we will help them answer.

10. Cookies

Only the cookies needed to keep you signed in. No advertising cookies, no third-party trackers, and we do not follow you across other websites.

11. Third-party integrations

We read government portals to collect tender notices they have already published. That is a one-way read of public pages and sends nothing about you. Separately, you can connect your own accounts, such as Google Drive, so documents flow into your vault. We ask your permission first, access only what that permission covers, and you can disconnect at any time from Settings.

12. Updates to this policy

We post material changes here with a revised effective date, and email account holders when the change is significant. Chardi.ai is built for businesses and is not intended for anyone under 18.

13. Contact us

Chardi AI, Inc. privacy@chardi.ai. Our terms of service cover the rest of your relationship with us.