Privacy Policy — SAMBidder

1. Information We Collect

We collect the following types of information:

Account Information: Name, email address, and profile photo when you sign in with Google OAuth.
Company Information: Company name, DUNS number, UEI, CAGE code, NAICS code, and set-aside qualifications that you provide in Settings.
Uploaded Documents: RFP files and supporting bid documents you upload to the Service.
Usage Data: Information about how you use the Service, including bid activity and feature usage.
Payment Information: Transaction records processed by Stripe. We do not store full payment card numbers.

2. How We Use Your Information

We use your information to:

Provide and operate the SAMBidder platform
Generate AI-powered proposal content using your RFP and company data
Process payments and maintain transaction records
Send notifications based on your preferences
Improve the Service and develop new features

3. AI Processing

Uploaded RFP documents and company information are sent to Anthropic's Claude AI models for analysis and proposal generation. By using the Service, you consent to this processing. Do not upload classified, sensitive, or confidential information subject to restrictions on third-party disclosure.

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) hosted on AWS infrastructure in the United States. We implement industry-standard security measures including encryption at rest and in transit, row-level security policies, and access controls.

5. Data Sharing

We share your data with the following third parties:

Anthropic: RFP content for AI analysis and proposal generation
Stripe: Payment processing and transaction management
Supabase: Database and file storage hosting

We do not sell your personal information to third parties.

6. Data Retention

We retain your account data and bid history as long as your account is active. You may delete individual bids at any time. To request deletion of your account and all associated data, contact us at privacy@sambidder.com.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Correct inaccurate information in your profile
Request deletion of your account and data
Opt out of non-essential notifications

8. Cookies

We use session cookies for authentication purposes only. These are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the Service.

10. Contact

For privacy inquiries, contact us at privacy@sambidder.com.