Information we collect
- Account data: name, work email, company name, role, and authentication identifiers.
- Workspace content: opportunities, uploaded solicitation documents and attachments, proposal drafts, knowledge base records, past performance, personnel profiles, and files you store.
- Billing data: plan, subscription status, and payment metadata. Card details are handled by our payment processor and are never stored by us.
- Usage data: pages viewed, feature events, timestamps, device and browser information, and error logs used to operate and improve the product.
- Marketing analytics: limited advertising pixel data on our public marketing pages.
How we use it
- To provide the platform: analysis, scoring, compliance matrices, proposal drafting, exports, and notifications you request.
- To secure accounts, prevent abuse, and troubleshoot issues.
- To bill subscriptions and provide support.
- To send service and deadline notifications you have configured.
We do not sell your data, and we do not use your workspace content to train public AI models.
AI processing
When you run an analysis, generate content, or ask the assistant a question, the relevant text is transmitted to our AI processing provider to produce the output. Only the content needed for that request is sent. AI output is generated text and must be independently verified before you rely on it.
Data you must never upload
Do not upload classified information of any level, Controlled Unclassified Information (CUI), Covered Defense Information (CDI), export-controlled technical data subject to ITAR or the EAR, or other information requiring specialized government security controls. The platform is not authorized or accredited to store, transmit, process, or analyze such information. See the Data Security & Acceptable Use Policy for the full rules.
Service providers
We use third-party processors for cloud hosting and database services, authentication, AI inference, transactional email, payment processing, and product analytics. Each is bound to use the data only to provide services to us.
Security
- Data is encrypted in transit and at rest by our infrastructure providers.
- Workspaces are logically isolated with row-level security so members only see their own organization's data.
- Uploaded files are stored in private buckets and served through short-lived signed links.
- Access to production systems is limited to personnel who need it.
No system is perfectly secure. We make no claim that the platform meets CMMC, FedRAMP, NIST, or other government security frameworks.
Retention and deletion
We keep workspace content while your account is active. You can delete individual records at any time and export your data from Settings. On account closure, workspace content is deleted or anonymized within 30 days, except records we must retain for legal, tax, or fraud-prevention purposes. Backups age out on a rolling schedule.
Your choices
- Access, correct, or delete your data from inside the app or by contacting us.
- Export a full copy of your workspace data before cancelling.
- Turn off non-essential notification emails in Settings.
Children and contact
The service is for business use and is not directed at anyone under 18. Privacy questions: privacy@govconunlocked.com.