Privacy

SAMRFP exists to send you relevant federal contract opportunities. That requires very little data, and we keep it that way.

How you join (double opt-in)

Signing up on this site sends you a confirmation email first. Nothing is stored beyond that pending request — and no digest is ever sent — until you click the confirmation link, and the request expires after 48 hours if you don't. We record when you asked to join and when you confirmed. If you instead email hello@samrfp.com directly, your own message is your signup: we answer it and treat it as your request to hear from us. Either way, consent is the only legal basis we rely on, and you can withdraw it at any time (see “Leaving”).

What we store

• Your email address — to send digests and replies.
• Your business description and profile notes — what you tell us (via the form, email replies, or ratings) about what your company does, so matching improves over time.
• Conversation history and feedback — your emails to the assistant and your 👍/👎 ratings.
• Digest engagement — whether a digest email was opened and which opportunity links in it were clicked. This is first-party only, tied to your own subscription, and used for one thing: telling whether our matching actually works so we can improve it.
• Optionally, public pages from your company website — if you give us the address, we read your public pages to build a richer profile (cached, refreshed at most monthly).

Cookies and browser storage

This site sets no cookies. It uses your browser's local storage for exactly one essential item: samrfp_consent, which remembers the choice you made in the cookie banner. That's it — no identifiers, no tracking state.

Analytics, only with your consent. If you choose “Accept all” in the banner, we load PostHog, a product-analytics service (PostHog Inc., hosted on its US cloud), on our public pages. It receives the pages you visit, the referring page, your browser and device type, and — as with any web request — your IP address, processed in the United States. We use this solely to see which pages work so we can improve them. If you choose “Essential only”, the analytics script never loads and nothing is sent. You can change your mind any time via the “Cookie settings” link in the footer of every page.

What we don't do

• No selling or sharing of your data with third parties. We do not “sell” or “share” personal information as those terms are defined in the California Consumer Privacy Act (CCPA).
• No ad networks or cross-site trackers. Website analytics (PostHog) run only if you explicitly consent on this site — they never see form contents or email addresses, never record your session, use no cross-site cookies, and honor your browser's Do Not Track setting. The open/click measurement in digest emails is our own, identifies only your own subscription, and is never shared.
• No accounts, no passwords — nothing to breach beyond the above.

Where it lives, and for how long

All data is stored in Amazon Web Services (us-east-1). Email is delivered via Amazon SES. AI processing (summaries, matching, replies) runs on AWS Bedrock; your data is not used to train third-party models.

Retention is need-based: your profile, conversation history, and engagement records are kept while you're subscribed and deleted in full when you ask (below). Raw copies of emails you send us are automatically deleted from storage after 30 days. If you unsubscribe, emails stop instantly; if you also want your data gone, say the word — literally. The one thing that outlives deletion is a do-not-email entry containing only your address, so nothing ever reaches you again.

Your rights

Wherever you are, you can ask us what we hold about you (access), get a copy in a portable form, correct it, or have it erased — and because everything we do rests on your consent, withdrawing that consent stops everything. If you're in California, this covers your CCPA rights to know and to delete; there is no “sale” or “sharing” to opt out of. To exercise any of these, email hello@samrfp.com — no forms, no identity hoops beyond writing from your subscribed address. If you believe we've fallen short, you also have the right to complain to your local data-protection authority.

Leaving

Every email has a one-click unsubscribe that works instantly. To delete your data entirely, reply to any of our emails with the word “delete” or write to hello@samrfp.com.

Contact

SAMRFP · hello@samrfp.com — questions, requests, and complaints all land with a human.