Legal

Privacy Policy

Version 2026-07-15. This policy is written to the strictest U.S. state standard (California's CPRA) and we apply it to everyone by default — then, below, we show the specific rights your state gives you.

What we collect

Account details you give us (email, phone, business name), the business profile you build (services, NAICS codes, states, contract size), your activity in the product (what you open, save, or mark applied — this is what sharpens your matching), and basic technical logs (IP address, device, timestamps) used for security and to run the service.

How we use it

To match and score federal opportunities against your profile, to send the alerts and reports you asked for, to secure your account, to process payments (via Stripe), and to improve the product. AI models score and summarize opportunities; your profile is the input. We do not use your data to train third-party models.

Who we share it with

Only the service providers we need to operate: our hosting and database, Stripe for payments (they never share your full card with us and we never see it), our email delivery provider, and AI providers that process opportunity text and your profile under contract to serve you. We never sell your data. We disclose data only when legally required.

Documents and files

There is no way to upload a file to us — the product has no upload anywhere, so there is nothing of yours on our disks. When you open a solicitation document, we stream it to you from the agency's own portal without writing it down; it passes through and it's gone.

What we do keep is the text of those public solicitation documents, so you can search and summarize them — the same documents anyone can download from SAM.gov. Working copies used to read a PDF are deleted the moment extraction finishes, including if the job crashes or is killed mid-run. Anything we keep falls under the retention below.

Cookies

We use only essential cookies — the ones that keep you signed in and the site working. We don't use advertising or cross-site tracking cookies. Because there's nothing to opt into beyond the essentials, our cookie notice is a simple acknowledgement.

Your browser's local storage holds two small first-party values, and nothing else: that you dismissed the cookie notice, and — if you arrived through a colleague's invite link — the referral code from that link, so the credit reaches the person who invited you. The referral code is kept for 30 days, is never sent anywhere until you create an account, and is deleted the moment you do. Neither value is a tracking identifier and neither is shared with anyone.

Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a valid opt-out of sale/sharing — which, since we don't sell or share your data for advertising, we already apply to everyone. The rights module below will confirm when GPC is detected.

Your rights

Everyone gets the core rights below. Your state may add to them — the module shows exactly what applies to you, and how to exercise it. You can always submit a request or email privacy@yntelradar.com. We don't discriminate against you for exercising any right.

Data retention & security

We keep your data while your account is active and as needed to comply with legal obligations. You can request deletion anytime. We protect data in transit and at rest and limit access to what's needed to run the service.

Changes

If we make a material change, we'll notify you and update the version at the top. Contact us anytime at privacy@yntelradar.com.