Privacy Policy
Last updated: October 2026
99 Tech Oy ('we', 'us') respects your privacy. This policy explains what personal data we collect when you use our website and product, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Who we are
99 Tech Oy, 3645583-2, registered in Helsinki, Finland. Contact: hello@biddingbase.com.
Data we collect
- Contact details you submit via our forms (name, company, email, message).
- Account data when you sign in to the product (email, organisation).
- Content you upload to your knowledge base, processed only to deliver the service.
- Technical logs (IP address, browser, pages visited) for security and reliability.
How we use your data
- To respond to enquiries and provide the service you request.
- To improve product quality, security and reliability.
- To meet legal and accounting obligations.
Lawful basis
We process personal data on the basis of contract performance, legitimate interest, legal obligation, or your explicit consent.
Data residency & sub-processors
Customer data is processed in the European Union. A current list of sub-processors is available on request. We do not train AI models on your confidential content.
Retention
If you email us, we process your message and contact details to answer your enquiry and keep the correspondence for up to 24 months unless a longer period is required by law. Customer data is kept for the duration of your subscription plus the period required by law.
If you use the contact form on our website, we collect your name, your work email, your message and, if you give them, your company and the topic you choose. We use them only to answer your enquiry. Microsoft Azure Communication Services passes the form on to our mailbox as an email, with its data location set to Europe; nothing from the form is stored on the website itself. We keep these messages as we keep any other email: for up to 24 months unless a longer period is required by law. To prevent abuse, we count the messages sent from each IP address for one hour, using a one-way hash of the address rather than the address itself.
Your rights
- Access, rectification, erasure, and portability of your data.
- Restriction of, or objection to, certain processing.
- Lodging a complaint with the Finnish Data Protection Ombudsman.
Contact
Write to hello@biddingbase.com to exercise any of the above rights.