Privacy Policy

1. Information We Collect

We collect information in three main ways: (a) information you provide directly, (b) information from your use of the Service, and (c) information from integrated third party services.

• Account information: name, email address, organization name, and authentication details.
• Billing information: subscription details and payment information processed via our payment providers.
• Customer Content: documents, solicitations, company descriptions, and other materials you upload or connect to the Service.
• Usage data: feature usage, timestamps, device and browser type, anonymized identifiers, and actions taken in the workspace.
• Integration data: metadata from connected services such as Google Drive or Dropbox that is necessary to deliver exports and manage folders.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Parse solicitations, generate compliance matrices, and assist in drafting proposal content
• Configure and maintain your connected storage integrations for exports
• Communicate with you about your account, updates, and important notices
• Monitor usage to improve reliability, performance, and user experience
• Detect, prevent, and address technical issues, abuse, or security incidents

We do not sell your personal information to third parties.

3. Data Handling Model

GovDraft is designed so that long term document storage happens in your own connected storage, not on GovDraft servers. In particular:

• Uploaded solicitations are processed in a secure, isolated workspace to extract key requirements.
• Parsed text and workspace content are stored in an encrypted, short lived cache so you can resume work during a limited time window.
• Final exports are delivered directly to your Google Drive or Dropbox in a GovDraft/YYYY/MM folder structure.
• GovDraft retains only metadata that is necessary for project organization, analytics, and product improvements.

For a more detailed description, see the Security and Compliance Overview page.

4. Use of AI and Automated Processing

GovDraft uses AI models to analyze solicitations, generate structured compliance matrices, and draft proposal language based on your inputs. The models operate on:

• The text you upload or paste into the Service
• Drafts and instructions you provide
• Company and opportunity metadata you supply

We use these models to provide the Service to you and to improve accuracy and reliability. We do not use your content to train unrelated public models that other customers can access.

5. Cookies and Similar Technologies

We may use cookies and similar technologies to authenticate users, remember preferences, and understand how the Service is used. You can usually control cookies through your browser settings, but disabling certain cookies may affect the functionality of the Service.

6. Sharing of Information

We may share information with the following categories of recipients:

• Service providers: vendors that help us operate the Service, such as hosting, analytics, and payment processing.
• Storage providers: Google Drive, Dropbox, or other connected storage services, as configured by you.
• Professional advisors: attorneys, accountants, auditors, and consultants under appropriate confidentiality obligations.
• Legal and safety: when required by law or when necessary to protect our rights, users, or the public.

We do not sell your personal information and do not share Customer Content with third parties for their independent marketing purposes.

7. Data Retention

We retain personal information only as long as necessary to provide the Service, meet legal obligations, and support legitimate business needs. In general:

• Temporarily parsed solicitation content is retained for a limited time window and is removed on a rolling schedule.
• Workspace metadata is retained while your account is active and for a period after cancellation, subject to our data retention and deletion policies.
• Billing and transactional records may be retained for longer periods as required for accounting, tax, or legal compliance.

8. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, secure authentication, and access controls. No system can be completely secure, and we cannot guarantee absolute security, but we design GovDraft to minimize unnecessary data storage and exposure.

9. Your Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, such as the right to access, correct, or delete information, or to object to certain processing. You can often update your information directly within the Service, and you may contact us if you need assistance exercising your rights.

If you no longer wish to use the Service, you can cancel your subscription and request that we delete or anonymize personal information, subject to legal and operational requirements.

10. International Transfers

The Service may be operated from servers located in the United States or other countries. If you access the Service from outside the United States, your information may be transferred to and processed in jurisdictions that may have different data protection laws than your home country. We take steps to protect personal information in accordance with this Privacy Policy wherever it is processed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by updating the date at the top of this page or by other reasonable means. Your continued use of the Service after any changes take effect indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at support@govdraft.com or through the contact options provided in the app.