Privacy Policy

Camptral Pulse (PTY) LTD, trading as PulseBids ("PulseBids", "we", "us", or "our"), is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains what information we collect, how we use it, and your rights as a data subject.

By using the PulseBids platform at pulsebids.co.za, you agree to the practices described in this policy.

1. Information We Collect

Information you give us

• Account details: your first name, last name, and email address when you register.
• Company profile: company name, B-BBEE level, province, and sectors you choose during onboarding.
• Billing details: payment is handled entirely by Paystack — we never see or store your card number. We retain your Paystack customer code and subscription status.
• Team members: email addresses of colleagues you invite to your workspace.

Information we collect automatically

• Tenders you save, your pipeline stage movements, and pitch drafts you generate.
• Standard server logs including IP address, browser type, and pages visited.
• Error reports via Sentry (anonymised stack traces; no personal data is included in error payloads by default).

2. How We Use Your Information

• Service delivery: matching you to relevant government tenders, running Tobey AI analysis on tender documents.
• Email alerts: sending you daily or weekly tender match notifications (only if you opt in).
• Billing: managing your Pulse Pro subscription via Paystack.
• Platform improvement: understanding which features are used so we can improve them.
• Legal compliance: retaining records as required by South African law.

3. Artificial Intelligence Processing

When you use Tobey AI features (pitch drafts, document analysis, chat), the relevant tender text is sent to Google Gemini (Google LLC, USA) for processing. By using these features you consent to this transfer. Google's data processing terms apply. We do not send your personal account information to Google — only anonymised tender content and your prompt.

4. Sharing Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share data only with:

• Paystack — for payment processing (their Privacy Policy: paystack.com/za/privacy-policy).
• Google LLC — for AI processing via Google Gemini (limited to tender content, not personal data).
• Sentry — for error monitoring (anonymised technical error data only).
• Google Ads (Google LLC) — conversion measurement and remarketing cookies, loaded only if you accept the cookie banner (see section 9).
• Cloudflare, Inc. — DNS and content delivery network in front of the site (sees IP addresses and request metadata).
• Render Services, Inc. — cloud hosting for the application and database.
• Our transactional email provider (SMTP) — delivers verification, alert and billing emails to the address you registered.
• Law enforcement or regulators — if we are legally required to do so.

Cross-border transfers. Several of these processors (Google, Sentry, Cloudflare, Render) store or process data outside South Africa, mainly in the United States and the European Union. We only transfer personal information to operators who are bound by contractual terms that give a level of protection substantially similar to POPIA (section 72).

5. Data Retention

We retain your account and workspace data for as long as your account is active. If you close your account, your personal data is deleted within 30 days, except where retention is required by law (e.g. financial records). Anonymised usage statistics may be retained indefinitely.

6. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access-controlled infrastructure. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions.

7. Your Rights Under POPIA

As a data subject you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information (subject to legal retention obligations).
• Object to the processing of your personal information.
• Withdraw consent at any time (e.g. unsubscribe from email alerts).
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our Information Officer (Matimba Reliance Marema) at legal@pulsebids.co.za. We will respond within 30 days. Our Information Officer registration submission reference with the Information Regulator is 2026-012047.

8. Information Regulator

If you are unhappy with how we handle your personal information, you may lodge a complaint with the Information Regulator of South Africa:

• Website: inforegulator.org.za
• Enquiries: enquiries@inforegulator.org.za
• Complaints: POPIAComplaints@inforegulator.org.za

9. Cookies

PulseBids uses essential session cookies required for authentication (logging you in) and security (CSRF protection). These are always set.

Advertising cookies (Google Ads conversion measurement and remarketing) are set only if you click "Accept" on the cookie banner shown on our public pages. Until you accept, no Google Ads script is loaded and Google Consent Mode is set to "denied". If you click "Decline" we remember that choice in your browser (key pb_consent) and never load advertising cookies. You can change your mind by clearing that browser storage. You may also disable cookies in your browser settings, but some features of the platform will not work.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top and, for material changes, notify you by email. Your continued use of PulseBids after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

Camptral Pulse (PTY) LTD (trading as PulseBids)
Republic of South Africa
POPIA / Privacy queries: legal@pulsebids.co.za
Support: support@pulsebids.co.za