Data, security, and your rights.

1.1 Information You Provide

When you create an account or use our Service, we collect information you voluntarily provide, including:

• Account Information: Name, email address, company name, phone number
• Billing Information: Payment method details, billing address (processed securely through Stripe)
• Profile Information: Business preferences, industry focus, notification settings
• Communication Data: Messages you send to our support team, feedback, and survey responses

1.2 Information We Collect Automatically

When you use our Service, we automatically collect certain information, including:

• Usage Data: Search queries, filters applied, pages viewed, time spent on platform
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, referral URLs, clicked links
• Cookies and Tracking: Session data, preferences, authentication tokens

1.3 Information from Third Parties

We may receive information from third-party services, including:

• Authentication Providers: Google, Microsoft (when you use social login)
• Payment Processors: Stripe (for payment processing and fraud prevention)
• Government Databases: Publicly available bid information from SAM.gov, PlanetBids, and other official sources

We use the information we collect to:

2.1 Provide and Improve Our Service

• Deliver personalized bid recommendations and search results
• Send email alerts and digest notifications based on your preferences
• Generate reports and analytics for your business needs
• Provide customer support and respond to your inquiries
• Improve our algorithms and enhance platform functionality

2.2 Account and Subscription Management

• Create and maintain your account
• Process payments and manage subscriptions
• Communicate billing information and account status
• Enforce our Terms of Service and prevent fraud

2.3 Legal and Security Purposes

• Comply with legal obligations and government requests
• Protect against fraud, abuse, and security threats
• Enforce our rights and the rights of others
• Investigate and prevent violations of our Terms of Service

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processing: Stripe (for secure payment processing)
• Email Services: Resend (for sending notifications and alerts)
• Cloud Infrastructure: Vercel, Firebase (for hosting and data storage)
• Analytics: Anonymous usage analytics to improve our service

3.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal process, court orders, or government requests
• Protect our rights, property, or safety, and that of our users
• Investigate potential violations of our Terms of Service
• Prevent fraud or other illegal activities

3.3 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new owner, subject to the same privacy protections.

4.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest using AES-256 encryption
• Secure authentication systems with JWT tokens
• Regular security audits and vulnerability assessments
• Access controls and employee security training
• Secure payment processing through PCI-compliant providers

4.2 Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.

4.3 Data Backup and Recovery

We maintain regular backups of our systems to ensure data availability and business continuity. Backup data is subject to the same security measures as production data.

5.1 Account Management

You can access and update your account information at any time through your dashboard settings.

5.2 Communication Preferences

You can control email notifications through your account settings, including:

• Daily digest frequency and timing
• Alert preferences for specific keywords or portals
• Marketing and promotional communications

5.3 Data Rights (GDPR and CCPA)

Depending on your location, you may have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your information

5.4 Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Sending an email to your registered email address
• Posting a notice on our website
• Providing in-app notifications

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.