Privacy Policy

Last updated: July 22, 2026

What we collect

• Your email address (for sign-in and deadline alerts)
• Your entity's UEI and the public SAM.gov registration data associated with it
• Certification details you enter (names, issuers, expiration dates)
• Payment records, processed by Stripe — we never see or store card numbers
• Basic product-usage and error diagnostics (see “Analytics & monitoring” below)
• If you use the free checker's reminder option: the email address and UEI you entered, plus a one-way hash of your IP address (used only to stop abuse of that form, and never stored as a readable address)

Free reminders (no account)

The free SAM checker lets you ask us to watch a UEI and email you before it expires. We use that address for exactly that — reminders about the date you asked about, and nothing else. No newsletters, no sharing, no selling. Every reminder has a one-click unsubscribe that takes effect immediately, and you can also email us to be removed.

What we do with it

One thing: monitor your compliance deadlines and email you about them. We do not sell, rent, or share your data with anyone, and we run no advertising.

Analytics & monitoring

To keep the product reliable and understand which features get used, we use two privacy-preserving third-party tools, both configured to minimize personal data:

• PostHog (product analytics) — measures which pages and features are used. It builds a per-person profile only for signed-in users, and may set a first-party cookie to count usage. It is never used for advertising.
• Sentry (error monitoring) — captures technical details when something breaks, so we can fix it. It is configured not to attach personal information.

Neither tool sells or shares your data, and we don't use either for advertising.

Where it lives

Data is stored in Supabase (Postgres, hosted in the US) with row-level security — your rows are readable only by your account. Emails are sent via Resend. SAM.gov data comes from the official public Entity Management API.

Deleting your data

Email us or cancel your account and we'll delete everything — entity, certifications, alert history — within 7 days. Stripe retains transaction records as required by law.

Contact

Questions: derek@renewalshield.us