Privacy policy

Information we collect

We collect your email address and account security information when you create an account. Security information includes a password hash, sessions, and any authenticator, passkey, or security key records you choose to enroll. We do not receive your passkey's private key or biometric data.

Your business profile can include NAICS codes, set-asides, an optional UEI, and SBA size and certification evidence. We store your preferences, watched solicitations, alert schedules, optional CC email address, pursuit statuses, and private pursuit notes.

We also process support messages and their reply addresses, email delivery records, and the CSV files made for your alerts. Public notices and award history come from government sources, separately from the private information you enter.

How we use information

We use this information to secure your account, match opportunities to your business profile, save your pursuit decisions, deliver requested alerts, manage subscriptions, answer support requests, and operate RFPSeek.

Your pursuit notes and statuses are available through your signed-in account. We do not publish them as part of government notice pages.

Payments through Stripe

Stripe processes payments and manages payment methods through hosted checkout and billing pages. You provide your payment details directly to Stripe. RFPSeek stores billing references and subscription information, such as customer and subscription identifiers, billing interval, renewal settings, status, and access dates.

We share the information needed to create and manage your purchase, including your account email and selected plan. Stripe processes personal information under its privacy policy and can retain records to meet legal obligations after your RFPSeek account is deleted.

Service providers and information sharing

Our hosting and backup providers process stored account information. Postmark handles account and alert email, including recipient addresses, message contents, links, and attachments. Support requests go to our support mailbox.

If you add a CC address, that recipient receives a copy of your alert emails. Only add an address you are authorized to use. Deleting an account cannot recall email already delivered to you or another recipient.

When you request a business lookup, we send the UEI to the SBA's public business search. To screen a new password for known breaches, we send only the first five characters of its SHA-1 hash to Pwned Passwords. We do not send that service your password, email, or complete hash.

We do not sell personal information or use it for targeted advertising.

We may disclose information when required by law or when necessary to investigate abuse or protect the service and its users.

Cookies, browser storage, and operational data

We use cookies for signed-in sessions and temporary sign-in challenges. Your browser also stores your theme choice, dismissed release announcements, and temporary Agency spend query results.

We process IP addresses to limit abusive requests and keep operational and error logs. The app does not include third-party advertising or analytics scripts.

Retention and account deletion

We keep account information while it is needed to provide your account and requested features. Alert CSV files that we attempted to send or delivered remain available until account deletion. Prepared files that were never sent may also remain until account deletion. We may remove them earlier once they are more than seven days old.

You can request deletion in Settings. We stop subscription renewal before scheduling deletion. If no billing remains ongoing and no purchased access remains, we erase the account immediately. Otherwise, deletion waits until that access ends and billing permits deletion. A payment-provider error can prevent scheduling or delay completion. You can choose to remove watches and stop alerts while waiting.

Final deletion removes the account and its local security records, profile, watches, pursuit decisions and notes, delivery records, alert files, and billing records. Historical backups and records held by Stripe or our email providers are not erased by this operation. Backup copies expire under the backup retention policy. Support correspondence follows a separate mailbox retention policy.

Your choices and privacy requests

You can change your profile and alert settings, remove watches, edit pursuit notes, and manage security credentials in your account. To ask for access, correction, or deletion that you cannot complete in Settings, contact support@rfpseek.com. We may need to verify your identity before responding.

We use reasonable safeguards to protect information. No online service can guarantee absolute security. Contact support if you believe your account has been compromised.

Policy changes and contact

We will update this page when our practices change and identify the effective date. For a material change affecting your account, we will provide notice through the service or by email.

For privacy questions, use our support form or email support@rfpseek.com.