Privacy Policy

Overview

GovExpress, Inc. ("GovExpress," "we," "us," or "our") operates govexpress.ai and related services (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use our Platform.

We are committed to protecting the privacy and security of your personal information. Our Platform is designed for technology companies and their executives evaluating or pursuing federal government contracts. The data we process is used exclusively to deliver intelligence and analysis services to you.

What We Collect

We collect information you provide directly to us, information generated through your use of the Platform, and data from public federal sources used to produce your reports.

Information you provide:

• Contact information (name, work email, job title, company name)
• Company information submitted via intake questionnaire (NAICS codes, products, certifications, revenue)
• Correspondence you send to us
• Payment information processed securely by our payment processor

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Usage data (features accessed, report sections viewed)
• Cookies and similar tracking technologies (see Cookies section)

Public federal data used to generate reports:

• Federal procurement records from SAM.gov, FPDS, and USASpending.gov
• FedRAMP Marketplace data, SBIR.gov, and GSA CALC+
• This data is sourced from public federal APIs and does not involve your personal information

How We Use Your Information

We use the information we collect to provide, maintain, and improve the Platform, including:

• Generating your Federal Readiness Report and related deliverables
• Communicating with you about your account, reports, and Platform updates
• Processing payments and managing subscriptions
• Responding to your support requests and inquiries
• Sending product updates and marketing communications (with your consent)
• Analyzing usage patterns to improve Platform features
• Detecting and preventing fraudulent or unauthorized activity
• Complying with applicable legal obligations

We do not use your company intake data to train machine learning models or share it with third parties for advertising purposes.

Data Sharing

We do not sell, trade, or rent your personal information. We may share data in limited circumstances:

• Service providers: Vendors who help us operate the Platform (cloud hosting, email delivery, payment processing, analytics). Each is bound by data processing agreements.
• Legal compliance: When required by law, regulation, court order, or to protect the rights and safety of GovExpress, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, with advance notice to affected users.
• With your consent: For any purpose you explicitly authorize.

All third-party service providers are required to maintain the confidentiality and security of your information and may not use it for any purpose other than providing services to us.

Security

We implement technical and organizational measures to protect your information against unauthorized access, loss, or alteration. These include:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls limiting data access to authorized personnel
• Infrastructure hosted exclusively in U.S. AWS regions
• Regular security assessments and vulnerability testing

No method of transmission over the internet or electronic storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

Data Retention

We retain your personal information for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data is retained while your account is active and for 12 months after closure
• Report data (intake questionnaire responses, generated reports) is retained for 24 months to support re-runs and comparisons
• Payment records are retained as required by applicable financial regulations
• Log data is retained for 90 days

You may request deletion of your data at any time. See Your Rights below.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us
• Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Cookies

We use cookies and similar technologies to operate the Platform and understand how it is used. Types of cookies we use:

• Strictly necessary: Required for the Platform to function (e.g., authentication, theme preference). Cannot be disabled.
• Analytics: Help us understand how users interact with the Platform (e.g., pages visited, features used). You may opt out.
• Preference: Remember your settings, such as dark/light mode selection.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and by posting the updated policy at govexpress.ai/privacy with a revised "Last updated" date.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated policy.

Contact

For questions, concerns, or requests related to this Privacy Policy or your personal data:

For general inquiries, visit our Contact page.