Privacy Policy

Last updated: July 9, 2026

What we collect

• Your email address (for sign-in and deadline alerts)
• Your entity's UEI and the public SAM.gov registration data associated with it
• Certification details you enter (names, issuers, expiration dates)
• Payment records, processed by Stripe — we never see or store card numbers

What we do with it

One thing: monitor your compliance deadlines and email you about them. We do not sell, rent, or share your data with anyone. No advertising, no tracking pixels, no analytics beyond basic server logs.

Where it lives

Data is stored in Supabase (Postgres, hosted in the US) with row-level security — your rows are readable only by your account. Emails are sent via Resend. SAM.gov data comes from the official public Entity Management API.

Deleting your data

Email us or cancel your account and we'll delete everything — entity, certifications, alert history — within 7 days. Stripe retains transaction records as required by law.

Contact

Questions: derekwden@gmail.com