Privacy Policy

1. Who this policy covers

This policy explains how BidGovAi.com (we, us) handles personal information when you visit BidGovAI, create an account, use its contracting workspace, or contact us. It covers our service, not independently operated government websites or third-party services you visit through links.

2. Information we process

• Account information: your name, email address, authentication identifiers, verification status, sessions, and account-recovery information. Our authentication provider processes your password and verification credentials to provide email sign-in.
• Business and workspace information: company profiles, NAICS codes, service areas, preferences, saved searches, pursuits, proposals, capability and past-performance information, and content you enter or upload. Documents may include their original files, extracted text, and analysis results.
• Requests and communications: details you submit through contact, readiness, early-access, or guide-interest forms, and messages you send to support.
• Technical information: necessary cookies and session identifiers, request and security logs, and device, browser, or IP information processed by us or our infrastructure providers to deliver and protect the service.

When payment checkout is unavailable, a guide-interest submission or reservation is not a completed purchase and does not charge you. When payment is enabled, Stripe processes your payment information directly. We receive transaction identifiers, customer and subscription identifiers, the offer selected, payment status, and limited billing details needed to provide access, manage the purchase, prevent fraud, and fulfill a digital order. We do not receive or store your full card number.

3. How we use information

We use information to create and secure accounts, verify email ownership, maintain workspaces, match and organize opportunities, process documents, provide requested communications, troubleshoot problems, prevent misuse, and meet applicable obligations. Search criteria such as NAICS codes may be sent to SAM.gov when retrieving opportunities.

The currently implemented document-analysis and drafting workflows use rules and templates; they do not send document contents to an external generative-AI model for analysis. Outputs still require human review. If we introduce a materially different use of your information, we will update this policy and provide notice or obtain consent where required.

4. Google sign-in, when available

If you choose Google sign-in when it is enabled, Google and our authentication provider share the basic identity information needed to authenticate you, such as your account identifier, name, email address, verification status, and any basic profile information included in the sign-in response. We do not receive your Google password or request access to your Gmail messages or Google Drive files.

We use Google sign-in information for account creation, authentication, account management, and security—not for advertising or training general-purpose AI models. You can manage or revoke the connection in your Google Account settings. Revoking Google access does not itself delete your BidGovAI workspace; contact us separately if you want your account and data removed.

5. Providers and other disclosures

We rely on service providers to operate BidGovAI. These include Neon for authentication and account services; Sites hosting supplied through OpenAI and Cloudflare infrastructure for the application, database, and document storage; Stripe for payment processing and subscription management when checkout is enabled; and an email-delivery provider for verification, recovery, guide delivery, and requested service communications. Using these infrastructure providers does not require you to have a ChatGPT account to create a BidGovAI email account.

These providers process information on our behalf to perform their services. Provider processing may occur in the United States or other locations where their infrastructure operates. Their own policies also explain their handling of information.

We may disclose information when reasonably necessary to comply with law or valid legal process, protect people and the service, investigate misuse, or support a business transfer subject to appropriate protections and applicable notice requirements. We do not use Google sign-in data for targeted advertising or sell that data.

6. Cookies and communications

Necessary cookies and similar session technologies keep you signed in and help protect authentication. Blocking them may prevent account features from working. The current application does not implement advertising pixels or behavioral-advertising trackers; infrastructure providers may process operational telemetry.

Account verification, recovery, and essential service messages are part of operating your account. If you receive optional marketing messages, you may use the unsubscribe instructions in the message or contact us to stop them.

7. Retention and manual deletion requests

We retain account and workspace information while needed to provide the service and for legitimate security, dispute-resolution, and legal purposes. Trial expiry does not automatically delete your account or files. We have not implemented a universal automatic deletion schedule.

Deletion is currently handled manually. Email [email protected] from your account email, describe what you want deleted, and identify your account. Do not send your password, verification codes, or API keys. We may request reasonable information to verify your identity before acting.

Deleting a login alone does not automatically delete all related workspace records or uploaded files. We will review the scope of your request across those systems and explain any information that must be retained. Backup copies and provider logs may be subject to separate retention processes. We do not promise an unverified purge deadline; any response or deletion deadlines required by applicable law still apply.

8. Your choices and rights

You can update supported profile fields in your account and contact us about access, correction, account closure, or deletion. Where available, the workspace export provides selected records; it is not a complete export of every authentication record, provider log, or original uploaded file.

Depending on your location and applicable law, you may have additional rights to obtain a copy of personal information, restrict or object to processing, withdraw consent, or complain to a relevant regulator. Contact us to exercise a right or ask about a request. We will consider requests under the laws that apply to you.

9. Security and sensitive information

We use authentication, access controls, and other technical safeguards, but no service can guarantee absolute security. Keep your credentials private and report suspected unauthorized access promptly.

Do not upload classified information, Controlled Unclassified Information (CUI), export-controlled materials, passwords, private keys, or unnecessary sensitive personal information. BidGovAI is not represented as an approved repository for those materials or as FedRAMP-authorized or CMMC-certified.

10. Adults and policy updates

BidGovAI is intended for adult business users, not children under 18. If you believe a child has provided personal information, contact us. We may update this policy as the service changes; the effective date above identifies the current version. Material changes will receive any notice or consent required by applicable law.

See our Terms of Service for the conditions of using BidGovAI.

Contact us

BidGovAi.com
1495 Duluth Hwy Ste F #1499
Lawrenceville, GA 30043, United States

Support and privacy requests: [email protected]