Privacy Policy

RFP Scout is operated by CKKC Associates LLC, a California limited liability company. This policy explains what we collect, why, who else processes it, and how long we keep it. It covers rfpscout.ai and the daily digest.

The short version: we do not sell your personal information, we never see your card number, and the only marketing email you get from us is about RFP Scout.

What we collect

• Account information — name, email address, company name. You give us these at signup.
• Your project configuration — the NAICS codes, certifications, counties, keywords, sources and delivery address for each saved project.
• Service activity — which digests were sent to you and when, and which solicitations you marked interested or not interested.
• Billing records — plan, status, billing interval and subscription identifiers, held in GoHighLevel. Your card details go directly to Stripe; we never receive or store them. Stripe records the IP address used at checkout.
• Site analytics — Vercel Analytics and Speed Insights record page views and performance timings. These are privacy-focused and do not use advertising cookies or track you across other websites.
• Technical logs — standard server logs, retained briefly for security and debugging.

We do not collect sensitive categories of personal information, and the Service is not intended for anyone under 18.

Why we use it

To run your filters and send your digest; to authenticate you; to take payment and manage your subscription; to email you about your account, trial or billing; to support you when you write in; to keep the Service secure; and to understand aggregate usage so we can improve it. We do not use your data to train machine-learning models, and we do not profile you for advertising.

Cookies

We use cookies that keep you signed in and keep the site secure. There are no advertising or cross-site tracking cookies. Blocking essential cookies will stop you being able to log in.

Who else processes your data

We share personal information only with the service providers below, only so they can perform their function for us, and never for their own marketing. We may also disclose information if required by law, or in connection with a merger or sale of the business — in which case this policy continues to apply until you are told otherwise.

We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months.

How long we keep it

• While your account is active — we keep your account, projects and digest history so the Service works and your saved filters survive a lapse in subscription.
• After you cancel — we keep your account and projects for 12 months, so returning after a slow season does not mean rebuilding your filters from scratch. After that we delete them.
• If you ask us to delete — we delete within 30 days, except records we must keep for tax and accounting purposes, which are retained as long as the law requires.
• Solicitation data — the bids themselves are public records published by government agencies. They are not personal information and are retained indefinitely.

Your California privacy rights

If you are a California resident, the CCPA gives you the right to know what personal information we have collected about you and how it is used; to request a copy of it; to correct inaccurate information; to request deletion; and not to be discriminated against for exercising any of these rights. Since we do not sell or share personal information, there is nothing for you to opt out of — but you may confirm that with us at any time.

To exercise any right, email support@rfpscout.ai from the address on your account. We will verify the request that way and respond within 45 days. You may use an authorised agent; we will ask for proof of their authority.

Email you receive

Your daily digest and account emails — trial, billing, password — are part of the Service. Pausing a project stops its digest; cancelling stops all of it. Onboarding and re-engagement emails carry an unsubscribe link and honour it.

Security

Data is encrypted in transit and at rest by our infrastructure providers. Access to production data is restricted, and account data is separated per customer at the database level. No system is perfectly secure; if a breach affects your personal information we will notify you as California law requires.

Changes to this policy

We will update the date at the top when this policy changes, and email account holders about material changes at least 30 days before they take effect.

Contact

CKKC Associates LLC, California, United States — support@rfpscout.ai. A person reads that address, and it is the right route for any privacy request, including access and deletion.