Legal
Privacy Policy
This policy explains what information FastTender collects, how and why we use it, who we disclose it to, and the choices and rights you have. It is written to the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Last updated: August 2026
Who we are
FastTender is an Australian Government tender intelligence platform. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles, and we treat those principles as binding on us regardless of any small business exemption that may apply.
You can reach our privacy team at privacy@fasttender.com.au.
What we collect
Account and profile information you give us: your name, email address, company details including your ABN, the states and territories you deliver in, your UNSPSC categories, panel memberships, capability statements and past performance records used to build your company profile.
Usage and technical information: pages viewed, features used, and standard technical details such as IP address, device and browser type, collected to operate and improve the service.
Payment information: when you subscribe, payment is handled by Paddle. We receive limited billing details such as your plan, country and the last four digits of a card. We never receive or store your full card number.
Publicly available procurement data: we ingest approaches to market, contract notices, standing offer notices and Australian Business Register records from official Australian Government sources. That material is published by government and is not collected from you.
Why we collect it, and what we do with it
To provide and improve the service, including scoring tenders against your company profile, sending the alerts you have asked for, powering AI features, and supporting your account.
To run our business, including billing, security, fraud prevention, analytics and meeting legal obligations.
We do not sell your personal information, and we do not use it for direct marketing without your consent. Where we do send marketing email, every message carries an unsubscribe option, as required by the Spam Act 2003 (Cth).
Payments
Our order process and payments are conducted by Paddle.com Market Limited ("Paddle"), the merchant of record for FastTender. When you buy a subscription, Paddle collects and processes your payment information as an independent controller of that data under its own privacy policy.
Paddle handles card processing, invoicing, tax including GST where it applies, and buyer support. "Paddle" appears on your statement, and you can manage your purchase at paddle.net.
Who we disclose information to
Paddle, our merchant of record and payment processor.
Clerk, our authentication provider, which manages sign-in and account credentials.
Our cloud hosting provider, which stores and serves the application and its data under contract.
Our AI provider, which processes prompts and content to power AI features under contract. We do not permit it to use your content to train its models.
Our email provider, which delivers transactional email and, if you opt in, marketing email.
We may also disclose information where we are required or authorised by law, or where it is necessary to protect our rights and our users. Each provider is bound by agreements requiring them to protect your information.
Overseas disclosure
Some of the providers listed above process information outside Australia, including in the United States and the European Union. Australian Privacy Principle 8 requires us to take reasonable steps to ensure an overseas recipient does not breach the Australian Privacy Principles, and we do that through our contracts with each provider.
By using FastTender you acknowledge that your information may be processed overseas by those providers.
Keeping information secure
We encrypt data in transit and at rest, restrict internal access to what a role requires, and log access to production systems.
If a data breach occurs that is likely to result in serious harm, we will assess it and notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.
Cookies
We use strictly necessary cookies to keep you signed in and operate core features, analytics cookies to understand and improve usage, and payment cookies set by Paddle during checkout. See our Cookie Policy for details and to change your preferences.
How long we keep it
We keep personal information for as long as your account is active and as long as we need it to provide the service, then for a reasonable period to meet legal, accounting and security obligations, after which it is destroyed or de-identified.
Accessing and correcting your information
Under Australian Privacy Principles 12 and 13 you may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Most of it you can view and edit directly in your account.
For anything else, email privacy@fasttender.com.au. We will respond within a reasonable period, normally 30 days. If we refuse access or a correction, we will tell you why in writing and how to complain.
You may also deal with us anonymously or under a pseudonym where it is lawful and practicable, though we cannot provide an account or a subscription on that basis.
Complaints
If you think we have mishandled your personal information or breached the Australian Privacy Principles, tell us first at privacy@fasttender.com.au. We will acknowledge your complaint and aim to resolve it within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. There is no fee for making a complaint to the OAIC.
Changes
We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you and we will update the date above.
Contact
Questions about this policy or your information? Email privacy@fasttender.com.au. For payment related privacy questions, Paddle acts as an independent controller: see paddle.net.