What we collect, and what we do with it.

Account data — your name and email address, managed by our authentication provider (Clerk). Company profile data — what you enter in your readiness profile: company name, SAM.gov status, UEI, CAGE code, NAICS codes, self-reported certifications, and capability summaries. Workspace content — the opportunities you track, pipeline notes, proposals, evidence records, submission checklists, and receipts you log. Billing data— handled by Stripe; card numbers never touch CaptureCore's servers. AI usage records — when you use AI features we log the feature used, token counts, and status for metering.

CaptureCore never asks for, stores, or transmits your government portal credentials — no SAM.gov, GSA eBuy, FedConnect, PIEE, or agency portal usernames or passwords, ever. The database schema has no fields for them, and this is enforced by automated tests.

Your data is used to run the product for you: scoring opportunities against your profile, deriving readiness statuses, and grounding AI responses in your workspace. Your data is scoped to your company — other customers cannot read it. We do not sell your data and do not use it for advertising.

CaptureCore runs on a small set of infrastructure providers: Clerk (authentication), Stripe (payments), Vercel (hosting), and Supabase (database). When you invoke AI features, the relevant notice text and workspace context are sent to our AI provider (OpenAI or Anthropic, depending on configuration) to generate the response.

You can cancel your subscription at any time from the in-app billing portal. To request deletion of your account and company data, or to ask a privacy question, contact us through the email address on your billing receipt and we will act on it. (A dedicated support address is being set up and will be published here.)