Privacy Policy
Effective October 14, 2026 · previous version (effective October 9, 2026)
What changed: we added how Grant Fit Check handles your answers, your location and its alerts (sections 1, 2 and 5).
This Privacy Policy explains how JG Services LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use SAM.gov Hunter (the “Service”). By using the Service you agree to the practices described below.
1. Information We Collect
Account data: email address, hashed password (managed by our auth provider), and timestamps for account creation and last activity.
Profile data you provide: company name, contact info, NAICS codes, UEI / CAGE codes, certifications, logos, and any uploaded templates or documents you choose to attach to opportunities.
Usage data: opportunities you favorite, analyses you run, proposals you draft, search filters you save. We use this to render your dashboard and to debug issues.
Grant Fit Check answers: if you use Grant Fit Check, the state (and, in California, the county) you choose, saved to your account. If your company profile has an address, the page reads its state each time and saves it only if you confirm it. On a paid plan, the answers you choose to save: your main line of work, a whole-dollar band of your lowest trainee wage (the exact wage you type is never stored on our servers), whether you are a franchise, your yearly staff turnover band, and your yes/no answers. We also keep the language you use there, so its emails reach you in it, and a record of what you did on the page — counts and actions, such as running a check or opening a program’s link, including which program (which can show your state) — never your answers.
Payment data: handled directly by Stripe. We do not see or store full card numbers; Stripe returns only metadata such as customer ID, subscription status, and last-4 digits.
Operational metadata: request logs (IP, user agent, status code) for security monitoring and rate-limit enforcement, retained for up to 90 days.
2. How We Use Information
We use the information above to: deliver the Service’s features (search, analysis, proposal generation, partner agreements); send you email about your account (sign-up confirmation, password resets, billing receipts and renewal notices, changes to this Policy or the Terms); send you service email you turn on in the app (NAICS alerts, Bid Sentinel digests, Agency Watch alerts, and grant program alerts), which you can turn off in the app or with the link in each one — a grant program alert is one you turn on for one program, and stopping promotional email does not stop it; send you promotional email about SAM.gov Hunter plans, pricing and features, and occasional requests for feedback, which you can stop at any time with the unsubscribe link in each one; enforce subscription tiers and rate limits; and detect and prevent abuse. Promotional email is identified as an advertisement. We do not use your data to train AI models, and we do not sell or rent personal information.
3. Third-Party Processors
We share data with the following processors under contracts that restrict their use to providing services to us:
• Supabase — database, file storage, and authentication.
• Anthropic — Claude API for solicitation analysis, proposal drafting, and other AI-assisted features. Prompts and outputs are sent to Anthropic and governed by their privacy and data-handling terms.
• Stripe — subscription billing and Connect payouts to partners.
• Vercel — application hosting and edge logging.
• Vercel Analytics — counts page views without personal identifiers.
• Resend — delivers our email; receives your address and each message.
• Sentry — error monitoring; receives request metadata and error traces that may include your user ID.
• Upstash — holds rate-limit counters keyed by IP address or user ID.
• SAM.gov / USASpending — public federal contracting data sources; we send your search queries to retrieve opportunity data.
4. Cookies & Local Storage
The Service uses cookies and browser local storage to keep you signed in, remember your search filters, cache recently-viewed opportunities, and persist UI preferences (theme, panel widths). These mechanisms hold session tokens issued by Supabase Auth. We also keep a random first-party identifier in your browser’s local storage to count sessions and understand how the app is used; it is never shared with advertisers. We do not use third-party advertising cookies.
5. Data Retention
We retain account and usage data for as long as your account is active. After cancellation we keep records needed to fulfill legal obligations (e.g., tax / billing records) for up to seven years. You may request deletion of your account and associated data at any time by emailing us at the address below; we will honor verifiable requests within 30 days, except where retention is required by law.
Grant Fit Check. Your location and the record of what you did there are kept while your account exists; you can clear your location, and delete your saved answers, on the Grant Fit Check page at any time. The answers you save on a paid plan are kept while the plan is active. If the plan ends, they keep applying, read-only, for 90 days from when we tell you — on the Grant Fit Check page if you open it, otherwise by email — and are then deleted, unless you subscribe again before then. That notice gives the deletion date, and we also try to email you about 14 days before it. If you do not open the page and we cannot email you, we cannot tell you, so your answers are kept until you delete them or your account is deleted. A grant program alert you turn on is deleted when you stop watching or when your account is deleted, and a record of the alerts we sent is kept while your account exists.
6. Your Rights
Depending on your jurisdiction (e.g., California, EU/UK), you may have the right to access, correct, port, or delete your personal information, and to object to certain uses. You may exercise these rights by contacting us at the address below. We will not discriminate against you for exercising any such right.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have collected such information, contact us and we will promptly delete it.
8. Security
We use industry-standard safeguards: TLS in transit, encryption at rest where supported by our processors, role-based access controls on our internal tools, and least-privilege service-account credentials. No system is perfectly secure; we encourage you to use a unique password and to notify us of any suspected compromise.
9. International Transfers
Our processors are primarily based in the United States. If you access the Service from outside the United States, you understand and consent to your data being processed in the United States.
10. Changes to This Policy
We may update this Policy. When we do, we post the updated version here with its effective date and, for material changes, tell you by email to the address on file or by a notice in the app. Continued use of the Service after the effective date is acceptance of the revised Policy. The previous version stays available on this site.
11. Contact
For privacy questions, data-subject requests, or to report a concern, email info@jgservicesllc.com.
Previous version of this Privacy Policy (effective October 9, 2026, superseded on October 14, 2026)
1. Information We Collect
Account data: email address, hashed password (managed by our auth provider), and timestamps for account creation and last activity.
Profile data you provide: company name, contact info, NAICS codes, UEI / CAGE codes, certifications, logos, and any uploaded templates or documents you choose to attach to opportunities.
Usage data: opportunities you favorite, analyses you run, proposals you draft, search filters you save. We use this to render your dashboard and to debug issues.
Payment data: handled directly by Stripe. We do not see or store full card numbers; Stripe returns only metadata such as customer ID, subscription status, and last-4 digits.
Operational metadata: request logs (IP, user agent, status code) for security monitoring and rate-limit enforcement, retained for up to 90 days.
2. How We Use Information
We use the information above to: deliver the Service’s features (search, analysis, proposal generation, partner agreements); send you email about your account (sign-up confirmation, password resets, billing receipts and renewal notices, changes to this Policy or the Terms); send you service email you turn on in the app (NAICS alerts, Bid Sentinel digests, Agency Watch alerts), which you can turn off in the app or with the link in each one; send you promotional email about SAM.gov Hunter plans, pricing and features, and occasional requests for feedback, which you can stop at any time with the unsubscribe link in each one; enforce subscription tiers and rate limits; and detect and prevent abuse. Promotional email is identified as an advertisement. We do not use your data to train AI models, and we do not sell or rent personal information.
3. Third-Party Processors
We share data with the following processors under contracts that restrict their use to providing services to us:
• Supabase — database, file storage, and authentication.
• Anthropic — Claude API for solicitation analysis, proposal drafting, and other AI-assisted features. Prompts and outputs are sent to Anthropic and governed by their privacy and data-handling terms.
• Stripe — subscription billing and Connect payouts to partners.
• Vercel — application hosting and edge logging.
• Vercel Analytics — counts page views without personal identifiers.
• Resend — delivers our email; receives your address and each message.
• Sentry — error monitoring; receives request metadata and error traces that may include your user ID.
• Upstash — holds rate-limit counters keyed by IP address or user ID.
• SAM.gov / USASpending — public federal contracting data sources; we send your search queries to retrieve opportunity data.
4. Cookies & Local Storage
The Service uses cookies and browser local storage to keep you signed in, remember your search filters, cache recently-viewed opportunities, and persist UI preferences (theme, panel widths). These mechanisms hold session tokens issued by Supabase Auth. We also keep a random first-party identifier in your browser’s local storage to count sessions and understand how the app is used; it is never shared with advertisers. We do not use third-party advertising cookies.
5. Data Retention
We retain account and usage data for as long as your account is active. After cancellation we keep records needed to fulfill legal obligations (e.g., tax / billing records) for up to seven years. You may request deletion of your account and associated data at any time by emailing us at the address below; we will honor verifiable requests within 30 days, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction (e.g., California, EU/UK), you may have the right to access, correct, port, or delete your personal information, and to object to certain uses. You may exercise these rights by contacting us at the address below. We will not discriminate against you for exercising any such right.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have collected such information, contact us and we will promptly delete it.
8. Security
We use industry-standard safeguards: TLS in transit, encryption at rest where supported by our processors, role-based access controls on our internal tools, and least-privilege service-account credentials. No system is perfectly secure; we encourage you to use a unique password and to notify us of any suspected compromise.
9. International Transfers
Our processors are primarily based in the United States. If you access the Service from outside the United States, you understand and consent to your data being processed in the United States.
10. Changes to This Policy
We may update this Policy. When we do, we post the updated version here with its effective date and, for material changes, tell you by email to the address on file or by a notice in the app. Continued use of the Service after the effective date is acceptance of the revised Policy. The previous version stays available on this site.
11. Contact
For privacy questions, data-subject requests, or to report a concern, email info@jgservicesllc.com.
This is a baseline template intended to be reviewed and customized by qualified legal counsel before being relied upon for compliance.