Your Privacy Matters
Privacy Policy How We Protect Your Data
We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data.
Quick Navigation
1. Data Controller
Gov Contract Finder ("we", "us", "our") is the data controller responsible for your personal data. Our contact details are:
- Email: team@govcontractfinder.com
- Privacy contact: team@govcontractfinder.com
- Contact Form: Contact Us
ChatGPT and Claude connections
Connecting Gov Contract Finder to ChatGPT or Claude requires your account and permission to access the workspace you choose. The connection receives federal notice and public contractor research, document names and original download links, and the saved opportunities and searches it requests. Notice facts can include publicly listed professional contact names, business email addresses and phone numbers, and performance addresses. Saving is available only within your existing workspace allowances. It does not enable email alerts, send messages, synchronize calendars, or change your subscription.
We process the search criteria, notice references, public company identifiers such as UEI or CAGE, search names, and pagination needed to fulfill each tool request. We do not request or store your full chat conversation through this connection. The chat platform receives tool results and handles your conversation under its own policies. Saved research remains in your Gov Contract Finder workspace until removed through the website or the applicable account/workspace deletion process. Shared workspace records may be retained for other members.
When you ask about an opportunity’s documents, the chat platform may download the original public files from SAM.gov and its attachment storage. Those hosts receive the download request; the chat platform handles the downloaded content under its own policies. Our connector returns the source links and does not upload private workspace files or internal customer records to the chat platform.
Authorization records associate your user and workspace with the connected app and its read/save permissions. Authorization codes and access and refresh tokens are stored as hashes. Access tokens last one hour; refresh authorization lasts up to 30 days and rotates on use. Expired codes and token families are removed during subsequent authorization activity, after an additional one-day buffer. App registrations persist so connections can be established again. Request-limit records use hashed network or account references and minute-based counts, expire within two minutes, and are removed during subsequent requests. Hosting and security providers process network information and operational diagnostics to deliver and protect the service; tool request content and credentials are not intentionally included in these diagnostics.
Disconnect your public chat authorization in your website’s connected apps or manage the connection in ChatGPT or Claude. Disconnecting stops future access; it does not delete saved research or prior chat content. Account deletion removes your public authorization codes and tokens. You can request deletion on the Delete account page or contact team@govcontractfinder.com for privacy requests.
Mobile App
This policy also applies to the Gov Contract Finder iOS and Android apps. Public contract search can be used without an account. Signed-in features use the same account and workspace as our website.
Clerk provides authentication, profile management, and session security. Verified profile details, including your name, primary email address, and phone number, synchronize to our account and customer records. Saved contracts and searches synchronize to your workspace and may be available to its other members. Account and saved-search requests also transmit network information such as your IP address to our services.
You can edit your contact details or remove a phone number through the app’s profile editor. Adding a phone number does not opt you into marketing texts. Saved-search email alerts are controlled separately when saving a search. Website integrations described elsewhere in this policy apply when you connect or use those features; installing the mobile app does not authorize access to your Gmail or calendar.
The mobile apps use PostHog to understand searches, saved contracts, sign-in, and opportunity alerts. Usage analytics includes app and operating-system information, screen names, interaction events, and coded account and workspace references. It excludes search text, contact details, passwords, verification codes, and notification tokens. We disable screen recording and IP address storage for this analytics project. Usage analytics is enabled by default; you can switch it off for your device in Settings, Legal, Privacy & data choices. This stops future collection and discards unsent usage events on that device. It does not remove events already received; contact our privacy team to request their deletion. Sentry separately provides crash and performance diagnostics.
Our data retention and privacy rights provisions also apply to mobile data. Settings includes links to this policy, our terms, and privacy choices. You can request account deletion in Settings or on our Delete account page. Deletion revokes account access and removes associated personal records; shared company work and legally required payment or business records are retained. Company subscriptions must be managed separately. Contact team@govcontractfinder.com for access, correction, consent withdrawal, or other personal-data requests.
2. Collection of Personal Data
We collect personal information in the following ways:
- Information You Provide: When you use our website, we may collect personal information you voluntarily provide, including your name, email address, contact information, and any other details you choose to share.
- Information Automatically Collected: We may collect certain information automatically when you visit our Website, including your IP address, browser type, device information, operating system, and browsing activity.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Website and hold certain information.
- Information from Third-Party Services: When you connect your Google account, we receive your Google profile information (name, email address, profile picture) and access to specific Google services you authorize (such as Google Calendar events and Gmail send capabilities). See Section 10 for full details on Google user data.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Performance of a contract with you
- Your consent
- Compliance with legal obligations
- Legitimate interests pursued by us or a third party
4. Use of Personal Information
We use the personal information we collect for the following purposes:
- To provide and maintain our Website and services
- To personalize your experience on our Website
- To communicate with you and respond to your inquiries
- To send configured emails and updates related to government contracts and our services
- To improve our Website, services, and customer support
- To enforce our Terms of Service and other legal agreements
- To comply with applicable laws and regulations
5. Privacy Rights and Choices
Depending on where you live and the law that applies, you may have rights such as:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise these rights, please contact us at team@govcontractfinder.com
6. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will delete your personal data when it is no longer needed for these purposes.
7. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
9. Third-Party Processors
We may employ third-party companies and individuals to facilitate our Website, provide services on our behalf, or assist us in analyzing how our Website is used. These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
10. Google User Data
Gov Contract Finder integrates with Google services to provide calendar synchronization and email capabilities. This section specifically addresses how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.
What Google Data We Collect
- Google Profile Information: Your name, email address, and profile picture (used for account identification).
- Google Calendar Data: Calendar event metadata (event titles, dates, and times) for the purpose of syncing government contract deadlines and opportunity dates to your calendar.
- Gmail Send Capability: Permission to send emails on your behalf through Gmail. We do not read, scan, or access your inbox or existing email messages.
How We Use Google Data
Google user data is used strictly to provide and improve the Gov Contract Finder features you have authorized:
- Syncing government contract opportunity deadlines and key dates to your Google Calendar.
- Sending emails on your behalf via Gmail when you explicitly initiate an email action within the application.
What We Do NOT Do With Google Data
In accordance with Google's Limited Use requirements, we explicitly confirm that we do NOT:
- Sell Google user data to any third party.
- Use Google user data for serving advertisements or interest-based advertising.
- Transfer or provide Google user data to data brokers or information resellers.
- Use Google user data for creditworthiness determinations or lending qualifications.
- Use Google user data to train artificial intelligence or machine learning models (generalized or otherwise).
- Transfer Google user data to any third party for purposes unrelated to providing or improving the Gov Contract Finder service.
Google Data Sharing
Google user data is not shared with or transferred to third parties, except as strictly necessary to provide the service (e.g., secure server infrastructure providers). Any third-party sub-processors with access to Google data are contractually bound to handle it in compliance with Google's Limited Use requirements and are prohibited from using it for any other purpose.
Google Data Protection
- OAuth tokens are encrypted at rest using AES-256-GCM encryption.
- Strict access controls limit token access to authorized server-side processes only.
- Tokens are never exposed to client-side code or browser storage.
- Tokens are never written to application logs or debug outputs.
Google Data Retention & Deletion
- Google OAuth tokens and associated data are retained only while your Google account connection is active.
- You may disconnect your Google account at any time from your dashboard settings.
- Upon disconnection, your OAuth tokens are immediately revoked with Google and permanently deleted from our systems.
- Calendar event mappings associated with your account are soft-deleted and no longer used for synchronization.
Revoking Google Access
You can revoke Gov Contract Finder's access to your Google account at any time through either of the following methods:
- Within Gov Contract Finder: Navigate to your dashboard settings and disconnect your Google integration.
- Through Google: Visit your Google Account Permissions page and remove Gov Contract Finder from the list of connected applications.
11. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: team@govcontractfinder.com
- Privacy contact: team@govcontractfinder.com
- Contact Form: Contact Us
Have Questions About Your Data?
Our team is here to help you understand your rights and how we protect your information.
Ready to Win Government Contracts?
Schedule a free demo with our experts and discover how Gov Contract Finder can help your business succeed.