Privacy Policy

Last updated: June 3, 2026

Draft — pending legal review. This template describes Fedprocai's intended data practices and is provided for transparency. It has not yet been reviewed by counsel and does not constitute legal advice. Please confirm the final policy with a qualified attorney before relying on it.

1. Overview

Fedprocai ("Fedprocai," "we," "us") provides an AI-powered bid intelligence and proposal assistant for U.S. federal contractors. This policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

2. Information we collect

Account data: name, email, organization details, and role.
Organization profile: NAICS codes, certifications, keywords, and similar inputs used to score opportunities.
Content you upload: RFP documents, proposals, knowledge-library items (past performance, capability statements, CVs, templates).
Usage and device data: logs, analytics events, and technical metadata used to operate and secure the service.
Billing data: processed by our payment provider; we do not store full card numbers.

3. How we use information

We use your information to provide and improve the service: scoring opportunities, analyzing RFPs, generating compliance matrices, drafting proposal content grounded in your knowledge library, processing payments, providing support, and maintaining security and audit trails. We do not sell your personal information.

4. AI processing

To generate analyses and drafts, relevant content is sent to third-party AI providers (which may include OpenAI, Anthropic, and Google, depending on your organization's configuration) and to OpenAI for text embeddings. We do not use your proposal content to train our own models, and we select providers that contractually do not train their models on submitted business data via their API offerings. Provider availability and terms may change.

5. Service providers (sub-processors)

We rely on trusted providers to operate Fedprocai, including Supabase (database, authentication, storage), our hosting provider (Vercel), Stripe (payments), Resend (transactional email), and the AI providers noted above. Each processes data only to provide their service to us.

6. Data security

We apply row-level security for strict multi-tenant isolation, role-based access control, encryption in transit (HTTPS/HSTS), rate limiting, content-security-policy headers, and a full audit trail. No method of transmission or storage is perfectly secure, but we work to protect your data using industry-standard safeguards.

7. Data retention

We retain your data for as long as your account is active or as needed to provide the service. You can export or delete your data at any time. After account deletion, residual copies may persist in backups for a limited period before being overwritten.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Fedprocai provides in-product data export (right-to-access) and account deletion (right-to- deletion). To exercise these rights, use your account settings or contact us at support@fedprocai.com.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about privacy? Email support@fedprocai.com or see our Terms of Service.