Privacy

Privacy policy

Last updated: May 2026.

What we collect

We collect the email you use to sign in, the company-profile data you enter (capabilities, NAICS codes, certifications, location, clearance status), and the goals and opportunities you generate during a run.

What we don't collect

We don't collect classified material, controlled unclassified information (CUI), or proposal text on your behalf — you remain the author of every external artifact.

How we use it

Your data powers the bid-desk workspace, drives matching against SAM.gov solicitations, and produces audit trails on each run. We do not sell or share data with third parties for marketing.

Subprocessors

Supabase (auth + Postgres), Anthropic (LLM inference), Resend (email), and SAM.gov (public solicitation data). Each is bound by data-processing agreements that prohibit secondary use.

Retention & deletion

You can delete your account at any time from the API keys page. We purge profile data and run history within 30 days of account deletion.

Contact

Questions: privacy@samrail.com. We answer within 5 business days.