Privacy PolicyHow We Protect Your Data

GCFinder ("we", "us", "our") is the data controller responsible for your personal data. Our contact details are:

• Email: team@govcontractfinder.com
• Data Protection Officer: team@govcontractfinder.com
• Contact Form: Contact Us

We collect personal information in the following ways:

• Information You Provide: When you use our website, we may collect personal information you voluntarily provide, including your name, email address, contact information, and any other details you choose to share.
• Information Automatically Collected: We may collect certain information automatically when you visit our Website, including your IP address, browser type, device information, operating system, and browsing activity.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Website and hold certain information.
• Information from Third-Party Services: When you connect your Google account, we receive your Google profile information (name, email address, profile picture) and access to specific Google services you authorize (such as Google Calendar events and Gmail send capabilities). See Section 10 for full details on Google user data.

We process your personal data on the following legal bases:

• Performance of a contract with you
• Your consent
• Compliance with legal obligations
• Legitimate interests pursued by us or a third party

We use the personal information we collect for the following purposes:

• To provide and maintain our Website and services
• To personalize your experience on our Website
• To communicate with you and respond to your inquiries
• To send you daily emails and updates related to government contracts and our services
• To improve our Website, services, and customer support
• To enforce our Terms of Service and other legal agreements
• To comply with applicable laws and regulations

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at team@govcontractfinder.com

We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will delete your personal data when it is no longer needed for these purposes.

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

We may employ third-party companies and individuals to facilitate our Website, provide services on our behalf, or assist us in analyzing how our Website is used. These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

GovContractFinder (GCFinder) integrates with Google services to provide calendar synchronization and email capabilities. This section specifically addresses how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

What Google Data We Collect

• Google Profile Information: Your name, email address, and profile picture (used for account identification).
• Google Calendar Data: Calendar event metadata (event titles, dates, and times) for the purpose of syncing government contract deadlines and opportunity dates to your calendar.
• Gmail Send Capability: Permission to send emails on your behalf through Gmail. We do not read, scan, or access your inbox or existing email messages.

How We Use Google Data

Google user data is used strictly to provide and improve the GovContractFinder features you have authorized:

• Syncing government contract opportunity deadlines and key dates to your Google Calendar.
• Sending emails on your behalf via Gmail when you explicitly initiate an email action within the application.

What We Do NOT Do With Google Data

In accordance with Google's Limited Use requirements, we explicitly confirm that we do NOT:

• Sell Google user data to any third party.
• Use Google user data for serving advertisements or interest-based advertising.
• Transfer or provide Google user data to data brokers or information resellers.
• Use Google user data for creditworthiness determinations or lending qualifications.
• Use Google user data to train artificial intelligence or machine learning models (generalized or otherwise).
• Transfer Google user data to any third party for purposes unrelated to providing or improving the GovContractFinder service.

Google Data Sharing

Google user data is not shared with or transferred to third parties, except as strictly necessary to provide the service (e.g., secure server infrastructure providers). Any third-party sub-processors with access to Google data are contractually bound to handle it in compliance with Google's Limited Use requirements and are prohibited from using it for any other purpose.

Google Data Protection

• OAuth tokens are encrypted at rest using AES-256-GCM encryption.
• Strict access controls limit token access to authorized server-side processes only.
• Tokens are never exposed to client-side code or browser storage.
• Tokens are never written to application logs or debug outputs.

Google Data Retention & Deletion

• Google OAuth tokens and associated data are retained only while your Google account connection is active.
• You may disconnect your Google account at any time from your dashboard settings.
• Upon disconnection, your OAuth tokens are immediately revoked with Google and permanently deleted from our systems.
• Calendar event mappings associated with your account are soft-deleted and no longer used for synchronization.

Revoking Google Access

You can revoke GovContractFinder's access to your Google account at any time through either of the following methods:

• Within GovContractFinder: Navigate to your dashboard settings and disconnect your Google integration.
• Through Google: Visit your Google Account Permissions page and remove GovContractFinder from the list of connected applications.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: team@govcontractfinder.com
• Data Protection Officer: team@govcontractfinder.com
• Contact Form: Contact Us