Privacy Policy

Account Information. When you register, we collect your name, email address, password (stored as a secure hash, never in plaintext), and account role (vendor or buyer).

Vendor Profile Information. Vendors provide company details, NAICS codes, capabilities, certifications (including WBE, MBE, Dual, Federal, and Local certification status), past performance information, and other onboarding details used to power matching and proposal generation.

Buyer Information. Government buyers provide agency affiliation, role, and contact information during buyer onboarding.

Payment Information. Subscription payments are processed by Stripe. We do not store full payment card numbers. We retain billing metadata such as subscription tier, transaction history, and invoice records.

Content You Provide. This includes RFP documents you upload or that our system ingests on your behalf, proposal drafts, AI-generated proposals and grant applications, and any other documents or text submitted to the Platform.

Usage and Device Data. We collect standard log data, including IP address, browser type, device information, and pages visited.

Public Government Data. We ingest publicly available procurement and award data from sources including SAM.gov, Grants.gov, and USASpending.gov. This is public data about contract opportunities and award history, not personal data we collect about you.

We use the information above to:

• Operate your account and the matching, RFP queue, and proposal generation features
• Generate AI-assisted matching scores, GO/REVIEW/NO-GO recommendations, draft proposals, and draft grant applications
• Send transactional email and one-time passcodes (via Resend)
• Process subscription payments (via Stripe)
• Maintain, secure, and improve the Platform
• Comply with legal obligations

Matching scores, eligibility recommendations, AI Readiness Advisor output, and AI-drafted proposals or grant applications are generated using artificial intelligence and are provided for informational and drafting assistance only. They do not guarantee contract award, eligibility determination, or regulatory compliance. You are solely responsible for independently reviewing and verifying any AI-generated content before relying on it or submitting it to any government entity.

We share information with:

• Service providers, including Anthropic (Claude API, for AI-assisted matching and drafting), Google Cloud (Vertex AI, Document AI, Cloud SQL, Cloud Storage, Secret Manager), Resend (email delivery), and Stripe (payment processing)
• Other Platform users, where applicable — for example, vendor "Solutions" storefront listings are visible to buyers and may be publicly viewable on the marketplace
• Legal and safety purposes, where required by law or to protect the rights, property, or safety of RFPfront, our users, or others
• In connection with a merger, acquisition, or sale of assets

We do not sell your personal information.

We retain your information as long as your account is active or as needed for the Platform to comply with legal obligation, resolve disputes, and enforce our agreements.

We use industry-standard safeguards, including encrypted secrets management, access controls, and secure cloud infrastructure (Google Cloud Platform), to protect your information. No method of transmission or storage is 100% secure.

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. You may also opt out of non-essential marketing email at any time. To exercise these rights, contact us at privacy@vitatechgroup.com.

The Platform is intended for business and government use and is not directed to or intended for use by individuals under 18.

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date.

Questions about this Privacy Policy can be sent to privacy@vitatechgroup.com.