This Privacy Policy explains how Trapier Management LLC (“Sturgeon AI,” “we,” “us”) collects, uses, and protects information when you use the Sturgeon AI Government Contracting & Grants platform (the “Service”).

1. Information We Collect

Account information: name, email address, password (hashed), and company profile details you provide (e.g., company name, NAICS codes, CAGE/UEI, certifications, capability statement).
Billing information: processed by Stripe; we store your Stripe customer ID and subscription status, never your full card number.
Usage content: opportunities you track, proposals and documents you create or upload, AI chat messages, and research queries.
Technical data: log and device information collected by our hosting providers for security and reliability.

2. How We Use Information

To operate and improve the Service; to match you with relevant opportunities; to generate AI-assisted analysis and drafts you request; to process payments and enforce plan limits; to send transactional email (signup confirmation, password reset); and to protect the Service from abuse. We do not sell your personal information.

3. AI Processing

Content you submit to AI features (chat, research, proposal drafting) is sent to our AI providers (Anthropic and OpenAI) to generate responses. We use API terms under which providers do not use your content to train their models. Do not submit classified or export-controlled information to the Service.

4. Service Providers

We use a small set of processors to run the Service: Supabase (database and authentication), Stripe (payments), Vercel and Railway (hosting), Anthropic and OpenAI (AI processing), and Resend (transactional email). Each receives only the data needed for its function.

5. Data Retention and Deletion

We retain your data while your account is active. You may request deletion of your account and associated personal data by contacting us; we will honor verified requests within [CONFIRM WINDOW — e.g., 30 days], subject to records we must keep for legal, billing, or security reasons.

6. Security

Data is encrypted in transit and at rest by our infrastructure providers. Access to customer data is restricted by row-level security and role-based controls. No system is perfectly secure; report concerns to us immediately.

7. Your Rights

Depending on your state or jurisdiction, you may have rights to access, correct, delete, or export your personal information. Contact us to exercise them; we will not discriminate against you for doing so.

8. Children

The Service is for business use and not directed to anyone under 18.

9. Changes

We may update this Policy; material changes will be posted here with a new effective date.

10. Contact

Privacy questions or requests: contact us or write to Trapier Management LLC [CONFIRM MAILING ADDRESS / EMAIL].

Privacy Policy.