Legal

Privacy Policy

Overview

The Procurement Manager does not use tracking cookies or analytics. There is no cookie banner because there are no trackers. This page describes how your data is processed.

Processors

The following third-party processors are used:

  • Bolt / Netlify — hosting and application serving.
  • Bolt Database / Supabase — managed Postgres database, authentication, and storage.
  • SendGrid — transactional email delivery (renewal reminders, reviewer invitations, notifications).

Customer workspace data

For customer workspace data (vendor names, contract metadata, renewal decisions, reviewer responses), the operator acts as a processor on behalf of the customer organization. A Data Processing Agreement (DPA) is available on request.

Supervisory authority

Sächsische Datenschutzbeauftragte (Saxon Data Protection Commissioner).