Privacy & Data

Personal inbox, bid packets and requests

Your Plus bid desk (business structure, operating roles, fit evidence, response sections and buyer watches), business folder (business details, vendor registrations and post-award tasks), inbox preferences, dismissal reasons and bid packets are encrypted and linked to your account. They remain until removed through a support request. Hiding a result changes your saved preferences and dismissal reasons only after you choose Save. Plus desk records are private to your account; buyer watches are planning records and do not trigger outreach or email. Downloading exports those details to your device. Buyer and partner requests contain the public business details you approve, your account link, review status and expiry. Requests need owner review before appearing publicly and stop displaying at expiry or withdrawal; review records remain for accountability. Do not post personal or confidential information. Public notice change history is kept for 90 days and starts when a change is observed. It does not automatically monitor attachment contents. Award searches send the public keyword and state to USAspending.gov; results are cached for up to 24 hours. Read-aloud uses your browser’s speech service and available device voices.

Opportunity alerts and partner listings

If you opt in to opportunity alerts, we store your verified account email encrypted, your selected filters, consent time, delivery state and unsubscribe token. Resend receives your email and matched public notices to deliver your requested notifications. Pause anytime or use the unsubscribe link. Delivery records are removed after 30 days; preferences remain until you delete them. Partner directory submissions contain only the public fields you explicitly approve, linked to your account for editing and withdrawal. Owner review is required before publication. Approved listings stop displaying after 180 days; you may withdraw and delete yours anytime. Workshop completion is saved to your account. PDFs are read on your device and are not uploaded by the reader. Only selected text you approve in AI Reviews is sent to OpenAI.

Owner analytics and local advertising

The owner can view aggregate email-account totals, verification counts and signup dates. Individual account emails and profiles are not displayed in analytics or sent to Google. With your advertising-measurement permission, a newly confirmed signup may send one conversion event to Google Ads, using a random event identifier rather than your account identifier. Declining prevents this event; enhanced conversions are not enabled by this portal. Advertising inquiries are encrypted and available to the owner for review and contact. Contact fields are never part of the public ad. Business name, service area, website and description are published only with the advertiser’s explicit consent and owner approval. Approved ads stop displaying seven days after approval. An hourly server job deletes the ad copy, company details, private contact fields, abuse-prevention hashes and card image from active application storage after expiry. Unreviewed submissions expire seven days after submission. Rejected or withdrawn ads are deleted immediately when storage is available; failed deletions retry on the next cleanup. Account profiles are separate and are not deleted by advertising cleanup. Hosting backups follow the provider’s retention cycle. Abuse prevention stores keyed hashes of contact and daily network identifiers, not raw IP addresses. Advertising is free and no call or pricing discussion is required. Optional card images are resized in your browser and checked again on the server to remove location metadata. Images are stored privately until owner approval; all visible card details, including printed contact information, become public only with publication consent and approval. Rejected, withdrawn and expired unapproved images are removed. Automated ad billing is not used. Local sponsor cards do not load third-party advertising scripts.

Optional advertising measurement

Google Ads loads with advertising cookies disabled by default and can send limited cookieless measurement signals before permission. With your permission, advertising cookies are enabled. Google may receive online identifiers and request information, including your IP address, and use advertising cookies. We do not send your account email, writing content, or authentication codes to the tag. Ad personalization is disabled. Choose Allow or Decline at the bottom of the page; use Ad measurement preferences to change your choice. Declining does not affect access. Previously stored Google cookies can be removed through your browser settings.

Your choices and public listings

Search filters organize public opportunities. We do not ask for a home address, personal profile, military records, or your clearance status. Broad service categories, states, funding preferences, language, theme, business classification codes, optional public capability/capacity notes, and saved notice IDs may stay in your browser. An optional business address for directions is saved separately on this device when you choose Save business address. Current-location access starts only when you select Use my current location and grant browser permission. Coordinates and manually typed starting addresses are not saved. Google Maps receives the origin and destination when you open directions; they are not sent to AI. Searches do not need your name or contact details. The separate jobs page links to employment websites; it does not collect résumés or import individual job applicants. Its area selector does not use GPS.

Information needed to operate your account

The hosted sign-in service handles authentication. Our database uses an account identifier to separate your records. A connected SAM.gov API key and saved bid workspace contents are encrypted in storage. Limited public source snapshots, refresh timestamps, and usage counters are also stored. If paid features are activated, a payment-provider customer identifier and subscription status are used; payment details are handled only on Stripe’s hosted pages. We do not store card numbers, CVC, expiration dates, bank details or payment billing addresses. Account identifiers, online identifiers, provider logs, and some business information can still be personal information under applicable law. This is not a promise of zero personal-data processing. The app does not copy authentication email or name fields into its profile or feedback tables.

Limited imports and sensitive-content screening

Imports retain selected public opportunity fields such as title, agency, general work location, explicitly published place-of-performance street addresses, dates, classification codes, and official links. We do not import points of contact, patient or inmate records, bidder rosters, full narratives, or attachments. Public pages and grant-detail responses may contain other text that is processed temporarily to extract allowed fields; we do not retain those full responses. Common sensitive patterns are checked before imported metadata is saved or served and before free text is saved or sent for writing assistance. Detected content is rejected or withheld, and old snapshots are cleaned when accessed. Pattern checks cannot recognize every name, health detail, identifier, or classification issue. Do not submit PII, PHI, classified, CUI, export-controlled, or confidential material. This service is not approved for handling regulated health or restricted government records; no HIPAA, CMMC, or FedRAMP compliance certification is claimed.

Writing & Reviews

The help-topic search runs in your browser. It does not send your question to a writing provider. When an activated writing session is available, only the conversation or review text you choose to submit is sent to OpenAI after consent and screening. Review text can include public notice excerpts, general business capabilities and a non-sensitive draft. Structured reviews check quoted text against your supplied excerpts; this does not establish authenticity, freshness or correctness. Reviews are not saved automatically. If you choose Save review to this bid, the selected result is stored in your encrypted bid journey. Daily and monthly usage counters are stored to enforce the shared allowance. The app does not store those conversation transcripts, and requests set provider response storage to false. Provider processing and retention are governed by its applicable terms; this does not guarantee zero retention. The app does not request microphone access or accept server-side audio or document uploads; the public PDF reader extracts text locally. Optional Read aloud uses your browser or device speech service, whose processing may depend on your settings. A saved bid draft is a separate, encrypted workspace that you choose to save. Saved journeys can also hold your trade answers, cost estimate, cash-flow assumptions, decision notes and post-bid learning. Delete the bid in My bids to remove that journey. Blank worksheet edits stay in the current page until you save them; downloading creates a file you control.

Feedback and founder content

Feedback stores the category, message, language, date, and account identifier so you and site administrators can review it. It is not a public discussion board. No name, email, phone, branch, clearance level, or attachment is requested. You can delete your reports from the form. Reports become eligible for deletion after 90 days and are removed on the next inbox request. The founder biography and photo are intentionally published with the founder’s permission; they are separate from opportunity imports. No other person in the photo is identified by this app.

Control, corrections, and applicable law

Delete saved bid workspaces from My bids, feedback from Your reports, and, for site administrators, the SAM.gov connection from the connection page. Clear device preferences using the button below or your browser settings. These actions do not delete records held independently by authentication, hosting, payment, or writing providers; their retention and request procedures apply. Hosting and security infrastructure may process request metadata such as IP addresses. For an account-data review or a removal request, use the feedback form with a general description and no sensitive details. Applicable federal and state privacy, security, consumer-protection, records, and procurement obligations still apply. Legal applicability depends on actual operations and must be reviewed before a broader commercial launch; a disclaimer or automated filter does not establish compliance.

Sources and terms

Current source registry · Accuracy and liability notice

We use official APIs or permitted public pages and links. We honor access restrictions and do not bypass sign-in, CAPTCHA, paywalls, or restricted document access. Original documents and source terms govern use and submissions.

This product uses the Grants.gov API but is not endorsed or certified by the U.S. Department of Health and Human Services.