Privacy notice

Who runs this platform

This platform runs the partner tenders of Misr Abu Dhabi for Real Estate Investments (MAD). Belmazad is MAD's tender consultant: it built the platform and runs the tender office day to day ("Powered by belmazad.com"). Global Appraisal Tech (GAT) reviews the evaluation for MAD, with read-only access.

Everything you submit is collected for MAD's tender. MAD takes every approval and award decision.

What we collect

Only what the tender asks for, screen by screen:

• Your account: your work email, your preferred language and your password. The password is kept only in scrambled (hashed) form; nobody can read it. A six-digit code is emailed to confirm the address.
• Your company: its country, legal name in English and Arabic, legal form and type, date of incorporation, commercial register, tax card, VAT and trade licence numbers where they apply, parent company, address and office in Egypt, website and LinkedIn page.
• The people who act for it: the contact person and the authorised representative — name, title, email and phone, and for the representative also nationality and the national ID or passport number and its country.
• Ownership and disclosures: the ownership type and any listing, beneficial owners holding 10% or more (name, nationality, share), politically exposed persons, the auditor and legal adviser, and your answers on conflicts of interest, litigation, defaults, insolvency, exclusion and sanctions, with details where you answer Yes.
• Experience and documents: up to five relevant projects, and the documents screen 4 asks for — commercial register, tax card or trade licence, proof of signing authority, the representative's ID, and where they apply the company profile and ownership structure — with the declarations you tick.
• The NDA: the representative's typed name and title, any declared authority, the time of signature and a SHA-256 fingerprint of the exact text signed.
• Your proposal: File A and File B, every file you upload with it, and the receipt of each submission with every file's SHA-256 fingerprint.
• Questions you ask the tender office, and the notices sent to you.
• Records of use: sign-in times, and for each recorded action the account, time, IP address and browser. Downloads from the data room are recorded too.

Why

• To prequalify your company as the request for proposal (RFP) requires: identity, legal standing, signing authority, ownership, conflicts of interest and sanctions.
• To run the tender with you: the NDA, the data room, questions and addenda, notices, and your proposal.
• To evaluate proposals under the RFP's published method, and to keep a record of every step.

The platform carries no advertising and no tracking or analytics tools.

Automated reading and public-source research

To help the tender team, the platform uses an AI service and web-research services. They prepare findings; they decide nothing. Belmazad's team reviews every finding and makes a recommendation, and MAD decides.

Documents are not kept by the AI service when they are read: each reading request is sent with storage switched off ("store: false").

• OpenAI (its API) reads the registration documents and your answers to check that they agree, and later reads proposals to prepare draft assessments for the evaluation committee.
• Exa, Tavily and Firecrawl search and read public web pages about your company — registers, your website, your projects, sanctions lists and the press — and the platform checks that your declared website exists.
• Only public identifiers go into these searches, such as your company's name, register number and website. A built-in guard withholds any search that would carry a figure from your proposal or other confidential text, so your bid figures never reach a search engine.
• These services are run by companies outside Egypt, so the information they read is processed outside Egypt.

Who can see your information

• Your company sees only its own registration, NDA, questions and proposal. Other bidders never see them.
• Staff see what their role needs: Belmazad's tender team, MAD's approvers, and GAT's reviewer, who can only read the evaluation.
• Proposals stay closed to everyone until the deadline. File B is encrypted when it is uploaded (AES-256) and opens only after MAD records the technical gate.
• When an answer to a question concerns everyone, it is published to all bidders without naming who asked.

Where it is kept

• In the platform's PostgreSQL database, hosted on Railway. Files are kept in the database or in a private storage bucket, and are only ever served through pages that check who is asking.
• Emails (codes and notices) are sent through Resend.
• Your sign-in is kept in one cookie, which lasts up to seven days and cannot be read by scripts. Staff also have a cookie that remembers the project they last chose.

How long it is kept

Information is kept for the tender and afterwards as the law requires. The exact periods are set by MAD; ask the tender office if you need them.

The audit log

Every significant step — sign-ins, submissions, signatures, decisions, publications and downloads — is written to an audit log that cannot be edited afterwards. It records who acted, when, from which IP address and browser. Belmazad's tender team and MAD's approvers can read it.

Your information and your questions

If something you submitted is wrong, or the tender office asks for more, you correct it through the same registration screens. For any other question about your information, contact the tender office as below.