Privacy Policy
Last updated 13 July 2026
1. Who is responsible for your data
Fractional Quest Ltd (company number 17322105), registered office 71–75 Shelton Street, London WC2H 9JQ, is the data controller for personal data processed through rfp.quest. We are committed to protecting your privacy and handling your data in line with UK GDPR and the Data Protection Act 2018.
2. What we collect
Account data: your name and email, provided directly or via Google sign-in, and authentication records handled by our auth provider (Neon Auth).
Company profile: the company details, sectors, regions, keywords and preferences you enter to power matching.
Usage data: the tenders you view, save, and search, and feature usage, used to provide and improve the Service.
Website scrape:if you use the “prefill from website” feature, we fetch your public website to suggest profile fields; we store only the resulting profile data you choose to save.
Market descriptions:if you describe what your company sells in the free-text box on our market pages, and our classifier cannot read a category from it, we keep that description for up to 90 days so we can improve the classifier. We store the text only — it is not linked to your account, your organisation or your IP address, it is held separately from our analytics, and it is deleted automatically when the 90 days expire. You do not need an account to use that box, and you never have to put identifying details in it.
3. How we use it
We use your data to operate your account, match you to relevant tenders, provide saved lists and alerts, improve the Service, and communicate with you about your account. We process this data on the basis of performing our contract with you and our legitimate interest in running and improving the Service.
4. Who we share it with
We do not sell your personal data. We share it only with the processors that run the Service on our behalf — including our database and authentication provider (Neon), our hosting provider (Vercel), and, where you use AI features, our AI provider — each bound to process data only on our instructions. Public tender data shown in the Service is already public information under the Open Government Licence.
5. Cookies
We use strictly necessary cookies to keep you signed in and secure your session. We do not use advertising cookies.
6. Retention
We keep your account and profile data for as long as your account is active. When you delete your account from your profile page, your account, company profile, saved tenders and associated data are permanently removed.
Free-text market descriptions that our classifier could not read are kept for a maximum of 90 days and then deleted automatically by a scheduled job. They are stored without any link to an account, organisation or IP address.
Assistant conversations in your workspace are stored so you can return to them, kept for a maximum of 12 months from their last activity and then deleted automatically. They are visible only to you — not to other members of your workspace — and are permanently removed when you delete your account. We do not use the text of your conversations for analytics.
7. Your rights
Under UK GDPR you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. You can edit your profile and delete your account directly in the app, or contact us to exercise any right. You may also complain to the Information Commissioner’s Office (ico.org.uk).
8. Contact
For any privacy question or request, contact privacy@rfp.quest.