Privacy Policy

1. Introduction

WinFed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at winfed.co (the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using our Service, including:

• Name and email address
• Company name and business information
• Unique Entity Identifier (UEI) and CAGE code
• Payment and billing information (processed securely via Stripe)
• NAICS codes and business certifications

Automatically Collected Information

When you access our Service, we may automatically collect:

• Device and browser information
• IP address and location data
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Match you with relevant federal contracting opportunities
• Generate proposals and analyze opportunities on your behalf
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse

4. Information Sharing

We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (e.g., payment processing, hosting, analytics)
• Legal Requirements: If required by law or in response to valid legal requests
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share your information

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal information
• Rectify or update inaccurate personal information
• Request deletion of your personal information
• Object to or restrict processing of your personal information
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@winfed.co.

8. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request that we delete your personal information, subject to certain exceptions
• Right to Opt-Out: You can opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, please contact us at privacy@winfed.co or call us. We will respond to verifiable requests within 45 days.

9. Cookies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. Third-Party Services

Our Service integrates with third-party services including:

• Stripe: For payment processing (Stripe Privacy Policy)
• Supabase: For authentication and data storage
• Anthropic: For AI-powered proposal generation (Anthropic Privacy Policy)
• SAM.gov: For federal contract opportunity data
• USAspending.gov: For competitive intelligence data

When you use our AI proposal generation features, your content may be processed by Anthropic's Claude AI. We do not use your data to train AI models.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@winfed.co
Website: winfed.co