1. Information We Collect
GovClaw collects information you provide directly when using our platform:
- Account information (name, email address)
- Organization data (legal name, EIN, certifications, financial summaries)
- Uploaded documents (proposals, budgets, compliance records)
- Grant tracking data and pipeline activity
- Chat messages sent to the AI editing assistant
2. How We Use Your Information
- Provide grant discovery, analysis, and proposal writing services
- Generate AI-powered summaries and scoring of grant opportunities
- Store and organize your organizational documents securely
- Improve our search algorithms and matching accuracy
We do NOT use your data to train AI models. Your documents and organizational data remain yours.
3. Data Storage and Security
- Data is stored in Supabase (PostgreSQL) with encryption at rest (AES-256)
- Files are stored in Supabase Storage with private bucket policies
- All data transmission uses TLS 1.2+ encryption
- Row-Level Security (RLS) ensures organization-scoped data isolation
- API keys and secrets are stored in environment variables, never in source code
- Infrastructure hosted on Railway (US-West region)
4. Third-Party Services
GovClaw uses the following third-party services to provide our platform:
- Supabase - Database hosting and authentication (SOC 2 Type II compliant)
- OpenAI - Text embeddings for semantic search (data not used for training)
- Anthropic - AI editing assistant (data not used for training)
- Grants.gov - Federal grant opportunity data (public data)
- Cloudflare Turnstile - Bot protection on our public sign-up form (privacy-preserving; no cross-site tracking cookies)
- Railway - Application hosting infrastructure
5. Data Retention and Deletion
- Your data is retained as long as your account is active
- You may request deletion of your account and all associated data at any time
- Upon account deletion, all documents, proposals, and organizational data are permanently removed within 30 days
- Backups containing your data are purged within 90 days of deletion
6. Your Rights
- Access: Request a copy of all data we hold about your organization
- Correction: Update or correct inaccurate information
- Deletion: Request permanent deletion of your data
- Portability: Export your data in standard formats (DOCX, JSON)
- Restriction: Limit how we process your data
7. Contact
For privacy-related inquiries, data access requests, or to report a concern, contact us at privacy@govclaw.com.