We use personal information to run searches, secure accounts, save alert preferences, deliver requested email or text alerts, support subscriptions, and keep the Service reliable. We do not sell personal information or share it for cross-context behavioral advertising. You can pause alerts at any time, unsubscribe from email, or reply STOP to a text.
This Privacy Policy explains how SAM Opportunity Search (“SAM Opportunity Search,” “we,” “us,” or “our”) handles personal information when you use our websites, search tools, account features, subscriptions, communications, and related services (collectively, the “Service”). It is part of our Terms of Use.
01 Scope
This Policy applies to information handled through the Service, including beta.samopportunitysearch.com, samopportunitysearch.com when connected, and successor domains that link to this Policy. It does not govern SAM.gov, Login.gov, OpenAI/ChatGPT, a payment processor, a communications carrier, or any other third-party service under that party’s control.
The Service is intended for business and government-contracting research. It is independently operated and is not affiliated with, sponsored by, or endorsed by the U.S. government.
02 Information we collect
Depending on how you use the Service, we collect or process the following categories:
| Category | Examples | Main purpose |
|---|---|---|
| Identity and contact data | Name, account email, tracker-interest email, alert-delivery email, mobile number, and account identifier supplied by our authentication provider. | Reserve a requested tracker, authenticate you, maintain your account, deliver alerts, and respond to requests. |
| Search and preference data | Keywords, phrases, chatbot messages, NAICS and PSC codes, industries, states, set-asides, notice types, date ranges, alert names, schedules, time zone, quiet hours, and digest limits. | Understand requests, run searches, save criteria, match opportunities, answer short procurement questions, and personalize requested alerts. |
| Communications and consent data | Support messages, delivery status, email opt-outs, SMS consent date, opt-out commands, and notification history. | Provide support, prove and honor consent, prevent duplicate alerts, and comply with messaging rules. |
| Subscription and transaction data | Plan, subscription status, Stripe customer and subscription identifiers, renewal dates, amount charged, payment status, and limited payment metadata received from a processor. | Administer paid plans, billing, tax, refunds, fraud prevention, and accounting. A payment processor—not us—handles full card details. |
| Device, usage, and log data | IP address, browser or device type, pages and features used, timestamps, referring page, session information, errors, security events, and request diagnostics. | Operate, secure, troubleshoot, measure, and improve the Service. |
| Public opportunity data | SAM.gov notice IDs, titles, agencies, codes, dates, set-asides, locations, and official links. | Display and cache public government opportunity records. This generally is not your personal information unless associated with your account activity. |
Search criteria may appear in the page address, browser history, shared links, and technical logs. Do not enter trade secrets, classified information, export-controlled information, personal data, or other confidential material as search keywords.
We do not ask for Social Security numbers, government credentials, financial account credentials, or full payment-card numbers. Please do not send them to us.
03 Where information comes from
- Directly from you, when you search, create an account, save criteria, enable alerts, subscribe, request support, or exercise a privacy choice.
- From authentication providers, which may provide your name, email address, account identifier, and authenticated-session signals.
- Automatically, through essential cookies, server logs, hosting infrastructure, security systems, and your interactions with the Service.
- From service providers, such as payment, email, and SMS providers, which return transaction, delivery, consent, or error information.
- From public sources, principally SAM.gov and other official government data services.
04 How we use information
We use information when reasonably necessary to:
- provide keyword, phrase, industry, NAICS, PSC, location, set-aside, notice-type, and date-based searches;
- show direct links and useful highlights from official opportunity records;
- create and secure accounts and recognize authenticated users;
- save, match, schedule, pause, and deliver user-requested email and SMS opportunity alerts;
- record delivery and opt-out status so we do not repeatedly send the same match or contact someone who opted out;
- offer, administer, bill, renew, and cancel monthly or annual subscriptions through Stripe;
- reserve a tracker requested from a public opportunity page and carry its criteria into account setup;
- respond to support, privacy, legal, and account requests;
- detect fraud, abuse, security incidents, excessive requests, and violations of our Terms;
- debug, maintain, analyze, and improve Service performance and accessibility; and
- comply with law, enforce agreements, establish or defend legal claims, and protect people, rights, and systems.
Common search, alert, and frequently asked questions are routed locally. When a request is ambiguous, we may send only that current message—not the visible conversation transcript—to an AI service provider to classify the request or produce a short answer. Chat messages are not saved as a conversation history in our application by default, although providers and infrastructure may create limited security and diagnostic logs under their applicable terms.
When a search returns active results, we may retain only its sanitized structured criteria—such as a non-personal keyword, NAICS code, and recognized city or state—to create or refresh a public search page and sitemap entry. We do not publish the raw chatbot message, email address, phone number, account identifier, or unsupported zero-result query through this process.
05 How we disclose information
We may disclose the minimum information reasonably needed to the following recipients:
- Hosting, infrastructure, and database providers that run, store, secure, and deliver the Service.
- Authentication providers that verify identity and maintain sign-in sessions.
- AI service providers that may classify an ambiguous chatbot message or produce a short procurement answer on our behalf.
- Communications providers that send requested email and SMS alerts and process delivery status, replies, and opt-outs.
- Stripe and other payment or billing providers that process subscriptions, payments, refunds, fraud checks, and tax-related records.
- Professional advisers such as attorneys, accountants, auditors, insurers, and security consultants under appropriate duties of confidentiality.
- Authorities or other parties when reasonably necessary to comply with law or valid process; protect safety, rights, or property; investigate abuse; or establish, exercise, or defend legal claims.
- A successor or transaction participant in a merger, financing, reorganization, sale, insolvency, or transfer of all or part of the Service, subject to customary safeguards.
- Parties you direct, such as SAM.gov when you follow an official opportunity link.
Service providers may use information only to perform services for us or as otherwise permitted by their contracts and applicable law.
07 Sale, sharing, and targeted advertising
We also do not share personal information for cross-context behavioral advertising and do not use mobile opt-in data or SMS consent for third-party marketing.
We have not sold or shared personal information for those purposes during the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16. Disclosures to processors that operate the Service for us, or disclosures you direct, are not treated as a sale by us.
08 Retention
We keep personal information only as long as reasonably necessary for the purposes described here, including providing an active account or subscription, honoring communication choices, maintaining security and anti-fraud records, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, or regulatory obligations. Retention depends on the record and context.
- Alert settings and account profile data are generally retained while the account or alert remains active and for a reasonable period afterward.
- Consent, opt-out, delivery, and suppression records may be retained after alerts stop so we can document and continue honoring the choice.
- Public search-result caches are used briefly for reliability and rate-limit protection; expired records may remain until routine cleanup. The cache contains public opportunity data and uses a hashed representation of the query as its key.
- Logs, support records, and billing records are retained for periods appropriate to security, support, legal, tax, and accounting needs.
- Backups may retain copies for a limited period until they cycle out under normal backup schedules.
When retention is no longer reasonably necessary, we delete, de-identify, or securely isolate the information, subject to technical and legal limits.
09 Security
We use administrative, technical, and organizational safeguards designed for the nature of the information and Service, including managed authentication, access controls, encrypted network transport, environment-based secret management, input validation, and provider security controls. No internet transmission, provider, database, or security measure can be guaranteed completely secure. You are responsible for protecting access to your authentication account and devices and for notifying us promptly of suspected unauthorized use.
10 Your privacy rights
Depending on your residence and applicable law, you may have rights to request access to, confirmation of processing of, correction of, deletion of, or a portable copy of personal information. You may also have rights to limit certain uses, opt out of certain processing, withdraw consent, or appeal a denied request. We will not unlawfully discriminate against you for exercising a privacy right.
To submit a request, email privacy@samopportunitysearch.com with the subject “Privacy request” and identify the right you want to exercise. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification with the individual. We may deny or limit requests where an exception applies, we cannot verify the request, or the request is fraudulent, excessive, or legally restricted; where required, we will explain and provide appeal instructions.
The table in Section 2 describes the categories of personal information collected, sources, business purposes, and recipient categories for the preceding 12 months. We do not sell or share those categories for cross-context behavioral advertising. California residents may use the request method above to exercise applicable rights to know, access, correct, delete, and obtain information about our practices.
11 Email and SMS choices
- Alert controls: Change frequency, quiet hours, channels, delivery details, or pause all alerts from Alert settings.
- Email: Use the unsubscribe link in an alert email or switch off email delivery in Alert settings. We may still send essential account, security, billing, or legal notices where permitted.
- SMS: Reply STOP to end text alerts or switch off SMS in Alert settings. Reply HELP for help. We may retain a suppression record so the opt-out remains effective.
- Consent: Withdrawing SMS consent does not affect processing that occurred before withdrawal and does not cancel an account or paid subscription.
Message and data rates may apply. Message frequency varies based on your selected schedule and the number of matching opportunities. See the Alerts and communications terms for additional conditions.
12 Children
The Service is designed for adults and business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us so we can review and take appropriate action. Account and subscription features are limited to users who can legally enter a binding contract, as described in the Terms.
13 United States processing
The Service is directed primarily to users in the United States and supports U.S. federal contracting research. Information may be processed and stored in the United States and other places where our providers operate. Those locations may have privacy laws different from those where you live. By using the Service, you understand that information will be processed as described in this Policy, subject to rights that cannot be waived under applicable law.
14 Third-party services and links
The Service links to SAM.gov and may rely on hosting, authentication, payment, email, SMS, and other providers. Their services are governed by their own terms and privacy notices. Following an external link may allow that provider to receive information such as your IP address, browser data, referring page, and any information you submit there. Review third-party notices before providing information.
15 Changes to this Policy
We may update this Policy as the Service, providers, or legal requirements change. We will post the revised version, change the “last updated” date, and provide additional notice when required by law or when changes materially affect how we handle personal information. Continued use after the effective date is subject to the revised Policy, but we will seek consent where law requires it.
16 Contact us
For privacy questions or requests, contact privacy@samopportunitysearch.com. For general support, contact support@samopportunitysearch.com.
Please do not include Social Security numbers, payment-card numbers, government login credentials, or other highly sensitive information in email.