Privacy policy
Plain version: we collect what the product needs to work, we process your documents through a commercial AI provider to read and draft, we do not sell your data or use it to train models, and you can export or delete it by asking. The detail follows.
1. Who we are
GovDealAI is software that helps federal contractors find, evaluate, draft and submit responses to government solicitations. This policy covers the govdealai.com website and the GovDealAI application. In this policy “we” and “us” mean GovDealAI, and “you” means the person or organisation using the service.
GovDealAI is not affiliated with SAM.gov, the General Services Administration, or any federal agency.
2. What we collect
Information you give us
- Account information — name, work email, company name, and password credentials handled by our authentication provider.
- Your library — documents and details you upload or tell us: past performance, CPARS narratives, capability statements, rates and price sheets, certifications and set-asides, UEI, CAGE and NAICS codes, insurance certificates and similar attachments.
- Work you create — solicitations you track, drafts, compliance matrices, notes, standing instructions and automations.
- Billing information — handled by our payment processor. We do not store full card numbers.
- Correspondence — messages you send us for support, security review or corrections.
Information collected automatically
- Usage and device data — pages and features used, timestamps, browser and device type, IP address.
- Agent activity logs — a record of what the agent read, scored, drafted and sent, and which user approved it. This exists so that every action is attributable, and it is part of the product rather than incidental telemetry.
- Analytics — aggregate website analytics to understand which pages are useful.
Information from public sources
The service reads public federal data on your behalf: solicitation notices, award records, entity and small-business directories, and wage determinations. This is public information and it is not personal data about you.
3. Why we collect it
- To provide the service — reading solicitations, scoring opportunities, drafting from your library, verifying and sending submissions you approve.
- To keep an audit trail — so you can show how a submission was produced and who approved it.
- To bill you and to enforce plan limits such as the monthly proposal-generation count.
- To support you when you ask us a question or report a problem.
- To keep the service secure — detecting abuse, debugging failures, preventing unauthorised access.
- To improve the product using aggregate usage patterns.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
4. AI processing
Reading solicitations and drafting proposals requires sending content to commercial large language model providers through their APIs. That content can include the solicitation and its attachments, and material from your library that is relevant to the draft being produced.
Under the terms we hold with those providers, your content is processed to return a result to you and is not used to train their models. We do not use your content to train models of our own. If your prime contractor or contracting agency restricts which AI providers may process proposal content, contact us before purchasing and we will tell you exactly which providers are used.
5. Who we share it with
We share data only with service providers who help us run the product, each acting on our instructions: cloud hosting and database infrastructure, authentication, payment processing, AI model providers, transactional email delivery, error monitoring and analytics.
We may also disclose information if required by law, to protect our rights or someone's safety, or in connection with a merger or acquisition — in which case this policy travels with the data.
Recipients you choose are not our doing: when you approve a submission, the proposal goes to the recipient in the solicitation. That is the point of the product, and it only happens on your click.
6. How long we keep it
We keep your account and library data for as long as your account is active, because a draft written without your library is not useful. After you cancel we retain data for a limited period so you can reactivate or export, then delete it. Audit records of submissions may be retained longer where we have a legal or contractual reason, and billing records are kept as long as tax and accounting rules require.
You can ask us to delete your data at any time and we will, subject to those obligations.
7. Your choices
- Access and export — ask us for a copy of your data.
- Correction — fix anything wrong in your account or library, in the product or by asking us.
- Deletion — ask us to delete your account and its contents.
- Marketing — unsubscribe from any non-essential email. Service and security notices are not marketing and continue while you have an account.
- Regional rights — depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to certain processing and the right not to be discriminated against for exercising them. Write to us and we will honour them.
8. Security
Data is encrypted in transit and at rest, access is scoped to your account and the permissions you set, and agent actions are logged. We do not currently hold a SOC 2 report, FedRAMP authorisation or CMMC assessment, and we say so on the security page rather than implying otherwise. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.
9. Children
The service is for businesses. It is not directed at anyone under 18 and we do not knowingly collect their information.
10. International transfers
We operate in the United States and our providers may process data there and in other countries. Where data moves across borders we rely on the safeguards our providers offer for those transfers.
11. Changes
If we change this policy we will update the date at the top, and for material changes we will notify account holders by email or in the product. Continuing to use the service after a change means you accept the updated policy.
12. Contact
Privacy questions, access and deletion requests: privacy@govdealai.com. Security specifics: security@govdealai.com. Anything factually wrong on this site: corrections@govdealai.com.