Privacy Policy

Last updated: October 6, 2026

FedBidFit ("we", "us") helps small government contractors find federal contract opportunities on SAM.gov that fit their business. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

Account information: your company name, email address, and a password (stored only as a salted hash). If you sign in with Google, we receive your Google account ID, email address, and name from Google.
Company profile: the business type (NAICS codes), states, certifications, keywords, project sizes, agencies, registration identifiers (UEI, CAGE code) and any descriptions you choose to enter.
Usage data: which matches you save, dismiss, label or track, dates you add, documents you generate, feedback you send, and the IP address and time of sign-up and sign-in (used for security and abuse prevention).
Billing: payments are handled by Stripe. We store your Stripe customer and subscription identifiers and plan status. We never see or store your full card number.

How we use it

To screen public SAM.gov notices against your profile and show or email you the ones that fit.
To generate the fit assessments and proposal documents you request. Profile and notice text is sent to Anthropic's Claude API for this purpose; Anthropic does not use API data to train its models.
To send you the emails you signed up for (digests, deadline reminders, registration-expiry reminders, account emails) through Resend. Every recurring email has an unsubscribe link.
To operate, secure and improve the service, enforce plan limits, and prevent abuse.

Who we share it with

We share data only with the service providers needed to run FedBidFit: Cloudflare (hosting and database), Anthropic (AI analysis), Resend (email), Stripe (payments) and Google (only if you use Google sign-in). We do not sell your information, and we do not share it with advertisers. Public notice data comes from SAM.gov and USAspending.gov; nothing about you is sent to them except the API queries needed to look up notices and, if you enter a UEI, your public SAM registration status.

Retention and deletion

We keep your account data while your account is active. Email support@fedbidfit.com to export or delete your account and we will do so within 30 days. Security logs are kept for up to 180 days.

Cookies

We use one essential cookie to keep you signed in and short-lived cookies to complete Google sign-in. We do not use advertising or tracking cookies.

Security

Data is encrypted in transit (HTTPS) and at rest. Passwords are hashed with PBKDF2. Sign-in links and session tokens are stored only as hashes and expire.

Your rights

You can view and edit your profile at any time from the dashboard, change your email preferences, and request a copy or deletion of your data. If you are in a jurisdiction with specific privacy rights (such as the EU/UK or California), you may exercise them by emailing us.

Children

FedBidFit is a business service and is not directed at anyone under 18.

Changes and contact

We will post any changes on this page and update the date above. Questions: support@fedbidfit.com.