Privacy Policy

1. Data We Collect

When you create an account, GovPillar stores your name, work email address, company profile (name, UEI, NAICS codes, capabilities statements, past performance, clearances, and contract vehicles), saved pipeline opportunities, capture documents, and chat history in a secure cloud database. All data is scoped to your company account and is not shared with other users or organizations.

Unauthenticated visitors may use browser localStorage to temporarily store checklists, scorecards, and compliance notes locally. This data never leaves your device unless you create an account.

2. Authentication

Account authentication is handled by our identity provider. Passwords are hashed and never stored in plaintext. Session tokens are stored in secure, HTTP-only cookies. You may also sign in via OAuth — in that case GovPillar receives only your name and email address from the provider.

3. AI / LLM API Calls

When you use features such as Fit Analysis, RFP Shredder, Compliance Matrix, or the Capture Consultant, the relevant solicitation text and your company profile are transmitted to server-side route handlers which call third-party AI inference APIs. These requests are processed to generate analysis results and are not stored beyond the scope of the individual request.

4. Cookies & Local Storage

GovPillar uses strictly necessary session cookies (set by our authentication provider) to keep you signed in, and optional browser localStorage keys to remember your preferences (theme, tour state). We do not use advertising trackers, analytics scripts, or fingerprinting of any kind.

You can review all cookies and local storage keys we use, and manage your consent preferences, on our Cookie Policy page.

5. Sensitive Information

Do not enter classified information, CUI (Controlled Unclassified Information), or personally identifiable information (PII) beyond what is necessary to populate your company profile. Treat all data you enter as you would any cloud-accessible SaaS system.

6. Data Retention & Deletion

Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Deleted data is purged from the database within 30 days.

7. Contact

For privacy questions or deletion requests, email us at privacy@govpillar.com or visit govpillar.com.