Privacy Policy

• Name, email address, and company name when you register or submit a readiness assessment
• Company details including UEI, CAGE code, NAICS codes, and business descriptions entered in the proposal wizard
• Billing information processed through our payment processor (Stripe) — we do not store full payment card numbers
• Communications you send us via email or support channels

• Usage data including pages visited, features used, and time spent in the application
• Device and browser information (type, operating system, IP address)
• Cookies and similar tracking technologies to maintain session state and improve user experience

• Entity data retrieved from SAM.gov APIs based on UEI numbers you provide
• If you sign in with Google OAuth, we receive your name, email, and profile picture from that provider

We use the information we collect to:

• Provide, operate, and improve the ScheduleBuilder™ platform
• Generate your GSA Schedule proposal documents and compliance reports
• Process payments and manage your account tier and access
• Send transactional emails related to your assessment results, account activity, and proposal status
• Send marketing emails and product updates (you may opt out at any time)
• Sync your contact and deal information to our CRM (HubSpot) for customer support and follow-up
• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraud or abuse

We do not sell your personal information to third parties.

We share your information only in the following circumstances:

• Service providers: We use Supabase (database), Stripe (payments), Resend (email), HubSpot (CRM), and Vercel (hosting). These providers process data on our behalf under data processing agreements.
• AI processing: Proposal document generation uses the Anthropic Claude API. Company data you enter in the wizard is sent to Anthropic's API for document generation purposes. Anthropic's API usage is governed by their privacy policy.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain your account and proposal data for the duration of your account plus 3 years, to support revision access and compliance audit needs. Lead and assessment data is retained for 2 years. You may request deletion at any time by contacting us at support@captureinsider.com.

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted database storage via Supabase, and role-based access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We use cookies for session management and authentication. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but some features of the platform may not function correctly without them.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications at any time via the unsubscribe link in any email
• Data portability (export your proposal data)

To exercise these rights, contact us at support@captureinsider.com.

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Data Controller: CaptureInsider LLC is the data controller for personal data collected through the Service.
• Legal Basis: We process your data based on (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Service.
• Right to Restrict Processing: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority.
• International Transfers: Your data is processed and stored in the United States. By using the Service, you consent to the transfer of your data to the US. We rely on standard contractual clauses and data processing agreements with our service providers to safeguard these transfers.

To exercise any GDPR rights, contact us at support@captureinsider.com. We will respond within 30 days.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

When you first visit our site, a cookie consent banner will appear. Google Ads tracking and analytics cookies will not be activated until you accept. You may withdraw consent at any time by clearing your browser cookies and revisiting the site.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests:

• Email: support@captureinsider.com
• Website: captureinsider.com
• CaptureInsider LLC