Privacy Policy · Gulawo

1. Who we are

Gulawo (“we”, “us”, “our”) provides a tender discovery, compliance and bid-workflow platform for East African contractors and buyers. This Privacy Policy explains how we collect, use, store and share personal data when you use our website and services.

2. Information we collect

We collect information you provide directly, and information automatically:

Account data: name, email address, password (hashed), organisation name and country.
Profile & documents: company capability profiles, capability lists, past performance, resumes and documents you upload to your vault (for example tax clearance certificates, PPDA certificates and licences).
Usage data: tenders you view, pipeline entries, pricing plans and feature usage.
Payment data: we do not store full card or mobile-money credentials; payments are processed by our payment providers.
Technical data: IP address, browser type, device and cookies (see our Cookie Policy).

3. How we use your information

To create and manage your account.
To match tenders to your company profile and send alerts.
To generate AI proposals and briefings grounded in your own data.
To provide compliance scanning, document vault and pricing tools.
To process payments and maintain billing records.
To secure the platform, prevent fraud and comply with the law.
To send service and (with your consent) marketing communications.

4. Legal basis

We process personal data on the basis of contract (to provide the service you signed up for), legitimate interests (to improve and secure the platform), consent (where required, for marketing), and legal obligation (where we must retain records).

5. How we share information

We do not sell your personal data. We share data only with trusted processors who help operate the service and are bound by confidentiality — for example cloud hosting, AI model providers, payment processors and email delivery. Where you publish a tender as a buyer, the tender details (not your private account data) are shown in the public feed.

6. Data retention

We retain your personal data for as long as your account is active or as needed to provide the service, tax/legal records and resolve disputes. You may delete your account at any time and request removal of your data, subject to legal retention requirements.

7. Your rights

Depending on your location you may have rights to access, correct, export (portability), restrict or delete your personal data, and to object to or withdraw consent for processing. To exercise these rights, contact us at the address below.

8. Security

We use industry-standard safeguards including encryption in transit (TLS), hashed passwords, access controls and secure storage. No method of transmission is 100% secure, and we cannot guarantee absolute security of your data.

9. Children

Our services are directed at businesses and are not intended for children. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated on this page, and the “last updated” date will be revised.

11. Contact

Privacy queries: sales@gulawo.com. Gulawo, Kampala, Uganda.