Legal
Privacy notice
Last updated 15 October 2026
Company and contact details will be published here before we take on paying clients.
Who we are
Crewbox Bid helps small and mid-sized companies find and bid for public tenders.
What we collect
- Free tender check form: your work email, company name, country and the field you sell in.
- Clients: the company information, past contracts, case studies, certificates and contact details you give us so we can write your bids.
- Public data: tender and award notices published on TED, the EU's official tenders journal. Award notices can name the companies that won.
We do not use advertising trackers or sell personal data.
Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Sending the tender check you asked for and following up on it | Steps you asked for before a contract (Art. 6(1)(b)) |
| Finding tenders, writing and checking bids for clients | Performing our contract with you (Art. 6(1)(b)) |
| Invoicing and keeping accounts | Legal obligation (Art. 6(1)(c)) |
| Contacting companies that recently won public contracts | Legitimate interest (Art. 6(1)(f)); you can object at any time |
Who processes it for us
We use a small number of service providers, each under a data processing agreement:
- Cloudflare hosts this website and receives the form.
- GitHub stores form requests, client files and bid drafts in a private repository.
- Anthropic provides the AI models that read tenders and draft bids. Client material is sent only to write that client's bids and is not used to train models.
Some of these providers may process data outside the EU. Where they do, transfers rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- Tender check requests: up to 12 months if you don't become a client.
- Client material: for as long as you are a client, then deleted within 90 days unless you ask us to keep it.
- Invoices: as long as accounting law requires.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, at any time. You can also complain to your national data protection authority.
Contact
Use the form on the homepage and a person will reply.