Privacy Policy

Last updated: October 28, 2026

1. Information We Collect

Account Data: We collect your name and email address, provided by our authentication provider (Clerk), to operate your account and provide customer support. When you sign up, we also record the IP address used, in order to prevent repeated free trials and abuse.

Payment Data: Subscriptions are handled by Stripe. We do not store your card number; we keep only the identifiers and subscription status that Stripe provides to us.

Document Data: When you upload PDFs or Word documents to the Knowledge Base or to the RFP extractor, the text is read and stored in our database to provide the Service: for RFPs, the extracted requirements, their source text and the answers you generate; for the Knowledge Base, the text passages and a numerical representation of them used for search. Large files may be held temporarily in private storage while they are processed, then deleted. We do not keep the original files after processing.

2. How We Use Your Information

We use your information to provide and improve the RFPClarify service, process your subscription via Stripe, prevent abuse, and communicate with you about your account. We do not sell your personal data or your documents.

3. AI Processing & Service Providers

To provide the AI features, text extracted from your documents is sent to OpenAI's API. Under OpenAI's API terms, data sent through the API is not used to train OpenAI models. OpenAI may keep API inputs and outputs for a limited period (currently up to 30 days) for abuse monitoring, as described in its own data policy.

We also rely on the following providers to operate the Service: Clerk (authentication), Stripe (payments), Supabase (database and file storage) and Vercel (hosting). Some of these providers are located in the United States; your data may therefore be processed outside your country.

4. Data Security

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to your documents and RFPs is restricted to authenticated users within your Organization. No system is perfectly secure, and we cannot guarantee absolute security.

5. Data Retention & Deletion

We keep your data for as long as your account is active. You can delete your Knowledge Base documents and RFPs at any time via the dashboard. If you wish to completely delete your account and all associated data, please contact support@rfpclarify.com.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. To exercise these rights, write to support@rfpclarify.com.

7. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed.