Privacy policy

RFP Lift is operated by Outreach by Design LLC, a California company. Mailing address: [MAILING ADDRESS OF OUTREACH BY DESIGN LLC]. Email: hello@rfplift.com.

• Account. The email address you sign in with, and the sign-in session that keeps you signed in.
• Firm data you enter. Your firm's name, the people on your roster (names, titles and pay and rate percentages), proposals, budgets, tasks, hours, timelines, checklists and notes. If you add other people's names and rates, you are responsible for having the right to do so.
• Uploaded RFPs. The PDF files you upload (RFPs, addenda and question-and-answer documents) and the information extracted from them.
• Early-access sign-ups. Your work email, the optional firm name and type of work you give, which version of the page headline you saw, and the time you signed up.
• Technical data. When you sign up for early access, a salted, one-way hash of your network address, used only to limit repeated sign-ups and deleted within 24 hours. Our host (Vercel) also receives your network address and browser details when you visit, and keeps request logs.

We do not collect Social Security numbers, federal tax ID numbers, payment card numbers or signatures, and you should not upload them. RFP Lift has no payments today.

• To run RFP Lift: sign you in, store your data, build budgets and exports, and read the RFPs you upload.
• To send sign-in emails, and to write to people who joined the early-access list about early access.
• To keep the service secure and to prevent abuse.
• To answer your messages and to meet legal obligations.

We do not sell your personal information, and we do not share it for advertising.

We use these services to run RFP Lift. Each handles data only to provide its service to us.

Data is processed in the United States. [DATA REGION: confirm the Supabase and Vercel regions.]

When you ask RFP Lift to read an RFP, the PDF is sent to Anthropic's API, and the answer comes back to your account. We do not use your uploaded RFPs to train AI models. [VERIFY: confirm Anthropic's current commercial terms on training and on how long it keeps API inputs and outputs, then state them here.]

AI output can be wrong. You decide what goes into your proposal, and the RFP is always the authority. See the terms.

RFP Lift uses one kind of cookie: the one that keeps you signed in. We use no advertising cookies, no tracking cookies and no analytics. Because we do not track you across websites, we respond to a "Do Not Track" signal the same way as to any other request.

• Account, firm data and proposals: until you delete them or ask us to delete your account.
• Uploaded RFP files: until you delete the proposal or document, or your account.
• Early-access sign-ups: until you ask us to remove you, or [WAITLIST RETENTION].
• The hashed network address from sign-ups: up to 24 hours.
• Backups kept by our providers: up to [RETENTION OF BACKUPS] after deletion.

You can delete a proposal in the app, which also deletes that proposal's uploaded RFP files. To delete your whole account, your firm data and your files, or to be removed from the early-access list, email hello@rfplift.com from the address on the account. We will confirm it is you and complete the request within [DELETION RESPONSE TIME].

Each account can reach only its own data. Files are kept in private storage, and data travels over encrypted connections. No system is perfectly secure, so we cannot promise that data will never be exposed.

[CCPA APPLICABILITY: the California Consumer Privacy Act, as amended, applies to businesses that meet its thresholds. We have not confirmed whether we do. We give the following rights to California residents either way.]

• The right to know what personal information we collect, use and disclose, and to get a copy.
• The right to delete personal information we collected from you, with some legal exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of.
• The right not to be treated differently for using these rights.

In the past 12 months we collected these categories: identifiers (email address, hashed network address), internet or network activity (hosting logs), professional information you enter about people on your roster (names, titles and rates), and the content you upload. We use them for the purposes above, we did not sell or share them, and we disclose them only to the services in the table above.

To make a request, email hello@rfplift.com. We may ask you to confirm your identity. You can use an authorized agent, and we may ask for proof that you authorized them. We aim to respond within 45 days.

California's "Shine the Light" law lets residents ask which personal information a business shares with others for their direct marketing. We do not share information for that purpose.

You can review and change the firm and roster information in your account in the app. To change the email address on an account, write to us.

RFP Lift is for business use and is not directed to anyone under [MINIMUM AGE]. We do not knowingly collect information from children.

We will post changes here and update the date at the top. If a change is significant, we will also email people who have an account.

Outreach by Design LLC, [MAILING ADDRESS OF OUTREACH BY DESIGN LLC]. hello@rfplift.com.