What you can and cannot do here.

TenderPulse is built for legitimate procurement work. Our user base is contractors, consultants, advisors, and procurement professionals helping their organisations win Bangladesh government and donor-funded tenders fairly and efficiently. The rules below describe the small set of things that are incompatible with that purpose.

We have written this policy narrowly. We are not interested in policing how you write a bid, what fonts you use, what pricing strategy you adopt, or any aspect of your business that does not touch the procurement-integrity floor. We are interested in stopping conduct that hurts other procurement participants, the procuring entity, or the integrity of the e-GP system itself — which is also what hurts you long-term.

The following conduct is prohibited on TenderPulse:

• Bid rigging or collusive tendering — using TenderPulse to coordinate prices or scope with other bidders on the same tender, or to share confidential bid information across competing entities.
• Falsified credentials or certificates— uploading or generating documents that materially misrepresent your firm’s qualifications, experience, financial position, or ownership.
• Hiding conflicts of interest — using the platform to bid on tenders where you have a material undisclosed relationship with the procuring entity in violation of Public Procurement Rules 2008.
• Bribery, kickbacks, or undue influence — using TenderPulse outputs to facilitate offers of money, gifts, or non-monetary advantages to public officials, Anti-Corruption Commission Act 2004, UK Bribery Act 2010, Foreign Corrupt Practices Act.

We do not police every bid for these issues — we are not the procuring authority, and surveillance of customer activity is not our role. But where conduct in this list is brought to our attention through credible channels (procurement-authority referral, journalist reporting, court order, or a whistleblower submission), we act.

We do not provide TenderPulse services to:

• Persons or entities on UN, US OFAC SDN, EU consolidated sanctions, UK HMT, or Bangladesh sanctions lists
• Firms debarred by the World Bank, Asian Development Bank, CPTU (Central Procurement Technical Unit), or any major multilateral procurement authority
• Persons subject to a Bangladesh Anti-Corruption Commission order prohibiting public-procurement participation

We screen company-profile data against sanctions lists at onboarding and re-screen monthly. A positive match triggers a 90-day investigation hold during which the account is suspended but data is preserved; if the match is confirmed, the account is closed and customer-facing data is exported to the customer before deletion. False-positive matches (common with near-spelling Bangladesh names) are resolved typically within 5 business days.

The following technical activity is prohibited:

• Exceeding documented API rate limits, or attempting to circumvent rate limits via IP rotation or account splitting
• Scraping content beyond what the documented API or RSS feed provides
• Creating multiple accounts to obtain repeated free trials, or to evade an existing suspension
• Reverse-engineering the application beyond the safe-harbour scope of our vulnerability disclosure policy
• Submitting workloads that are clearly designed to exhaust our AI inference budget — for example, automated mass prompts unrelated to procurement work
• Uploading malicious files (viruses, ransomware, exfiltration tooling) — including via tender ZIPs that you uploaded for analysis

You represent that any document you upload, any text you submit to the AI copilot, and any output you keep, is content you have the right to use. This includes copyright, confidentiality, and trade-secret considerations. Copyright Act 2000 (BD)

You may not upload content that is unlawful in Bangladesh — including content that violates the Digital Security Act 2018 or the ICT Act 2006, or that defames, harasses, or incites violence against any person.

AI-generated outputs from TenderPulse are yours to use commercially (per our EULA §4). You retain responsibility for confirming factual accuracy, regulatory fit, and citation integrity before submitting an output to a procurement authority. We do not certify that AI outputs are correct — we generate them with reasonable diligence and label them as AI-derived.

Our suspension procedure has six steps:

1. Trigger — a credible signal arrives: a CPTU referral, a court order, a security alert, an internal-review finding from our compliance team, or a customer report.
2. Severity assessment — within 4 hours of the trigger, on-call compliance staff classify the issue as (a) immediate-action (suspend now and notify), (b) investigate- first (preserve data, notify, no suspension yet), or (c) no action (close the report).
3. Notification— within 24 hours of suspension, the affected account holder receives an email and in-app notice describing the specific clause invoked and the factual basis. Generic “your account violated our terms” messages are not acceptable internally.
4. Cure window (where applicable) — for non-egregious violations, we provide a 30-day window for the user to address the underlying issue, after which we re-evaluate.
5. Appeal — the user may appeal at any time. Appeals go to a named human reviewer who is not the staff member who triggered the suspension. Reviews complete within 5 business days.
6. Final decision — uphold (with explicit reasons), reverse (account restored, time credit applied), or modify (e.g. partial restoration with restrictions).

If you believe another user is violating this policy, email help@tenderpulse.com.bd with the subject line “AUP-REPORT” and as much factual detail as you can share. We accept reports from customers, non-customers, journalists, regulators, and procurement authorities.

We treat every report as confidential and we never share the reporter’s identity with the subject of the report. For reports involving allegations of bribery or corruption, we additionally honour any whistleblower protections available in the reporter’s jurisdiction.

We will respond with an acknowledgement within 5 business days and a triage outcome within 20 business days. We will not always tell the reporter what action we took (privacy of the subject is also a consideration), but we will confirm the report was reviewed.

To make our limits explicit:

• We will not delete your data as part of a suspension. Data retention follows the rules in our retention schedule, not the severity of an alleged violation.
• We will not suspend an account for politically-disfavoured speech, criticism of TenderPulse, or for refusing to accept an unrelated commercial term.
• We will not act on suspension requests from competitors, procurement intermediaries, or third parties without independent factual basis.
• We will not extend a suspension beyond the time needed to evaluate the underlying issue. Suspensions have a stated duration; indefinite suspensions are not a tool we use.
• We will not invoke a vague clause when a specific one applies. Where this policy lists a specific rule, we will cite that rule rather than fall back to a general “misuse” framing.