Privacy Policy
DRAFT — Pending Legal ReviewLast updated: March 2, 2026
1. Information We Collect
We collect information you provide directly (name, email, company details, payment information) and information generated by your use of the Service (contract preferences, feedback on opportunities, usage logs). We also collect technical data such as IP address and browser type for security and analytics purposes.
2. How We Use Your Information
We use your information to: provide and improve the Service; match you with relevant government contract opportunities; send transactional and notification emails; process payments; respond to support requests; detect and prevent fraud; and comply with legal obligations. We do not use your data for advertising purposes.
3. Data Retention
We retain your account data for as long as your subscription is active. If your subscription lapses, data is retained for 90 days to allow reactivation. After the retention window expires, your data is permanently deleted. You may request early deletion by contacting support.
4. Third-Party Services
We use the following third-party services to operate the platform:
- Stripe — payment processing. Your card details are handled directly by Stripe and are never stored on our servers.
- Resend — transactional email delivery.
- SAM.gov — public government contract data (no personal data shared).
- Sentry — error monitoring (may capture anonymized stack traces).
5. Your Rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to certain processing; and receive a copy of your data in a portable format. To exercise these rights, use the "Export My Data" feature in Account Settings or contact us directly.
6. Cookies
We use a single session cookie (
gc_session) to authenticate your browser session. We do not use third-party tracking cookies or advertising cookies.7. Security
We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and session-based authentication. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the application. Continued use after changes become effective constitutes acceptance of the updated policy.
9. Contact Us
Privacy questions or requests? Email privacy@shelbydynamics.com.