Privacy Policy
Effective April 26, 2026
This Privacy Policy explains how JG Services LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use SAM.gov Hunter (the “Service”). By using the Service you agree to the practices described below.
1. Information We Collect
Account data: email address, hashed password (managed by our auth provider), and timestamps for account creation and last activity.
Profile data you provide: company name, contact info, NAICS codes, UEI / CAGE codes, certifications, logos, and any uploaded templates or documents you choose to attach to opportunities.
Usage data: opportunities you favorite, analyses you run, proposals you draft, search filters you save. We use this to render your dashboard and to debug issues.
Payment data: handled directly by Stripe. We do not see or store full card numbers; Stripe returns only metadata such as customer ID, subscription status, and last-4 digits.
Operational metadata: request logs (IP, user agent, status code) for security monitoring and rate-limit enforcement, retained for up to 90 days.
2. How We Use Information
We use the information above to: deliver the Service’s features (search, analysis, proposal generation, partner agreements); send transactional emails (sign-up confirmation, password resets, billing receipts); enforce subscription tiers and rate limits; and detect and prevent abuse. We do not use your data to train AI models, and we do not sell or rent personal information.
3. Third-Party Processors
We share data with the following processors under contracts that restrict their use to providing services to us:
• Supabase— database, file storage, and authentication.
• Anthropic— Claude API for solicitation analysis, proposal drafting, and other AI-assisted features. Prompts and outputs are sent to Anthropic and governed by their privacy and data-handling terms.
• Stripe— subscription billing and Connect payouts to partners.
• Vercel— application hosting and edge logging.
• SAM.gov / USASpending— public federal contracting data sources; we send your search queries to retrieve opportunity data.
4. Cookies & Local Storage
The Service uses cookies and browser local storage to keep you signed in, remember your search filters, cache recently-viewed opportunities, and persist UI preferences (theme, panel widths). These mechanisms hold session tokens issued by Supabase Auth. We do not use third-party advertising cookies.
5. Data Retention
We retain account and usage data for as long as your account is active. After cancellation we keep records needed to fulfill legal obligations (e.g., tax / billing records) for up to seven years. You may request deletion of your account and associated data at any time by emailing us at the address below; we will honor verifiable requests within 30 days, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction (e.g., California, EU/UK), you may have the right to access, correct, port, or delete your personal information, and to object to certain uses. You may exercise these rights by contacting us at the address below. We will not discriminate against you for exercising any such right.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have collected such information, contact us and we will promptly delete it.
8. Security
We use industry-standard safeguards: TLS in transit, encryption at rest where supported by our processors, role-based access controls on our internal tools, and least-privilege service-account credentials. No system is perfectly secure; we encourage you to use a unique password and to notify us of any suspected compromise.
9. International Transfers
Our processors are primarily based in the United States. If you access the Service from outside the United States, you understand and consent to your data being processed in the United States.
10. Changes to This Policy
We may update this Privacy Policy. Material changes will be communicated via email to the address on file or via an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.
11. Contact
For privacy questions, data-subject requests, or to report a concern, email info@jgservicesllc.com.
This is a baseline template intended to be reviewed and customized by qualified legal counsel before being relied upon for compliance.