Privacy Policy

Last updated June 10, 2026

This policy explains what SolicitFit collects, how we use it, and the choices you have. Your unpublished proposal content is sensitive IP, and we treat it that way.

What we collect

Account: your email and organization membership, via our auth provider (Clerk).
Content you submit: solicitation text/PDFs and your draft proposal, to run the check.
Usage: metering counts and token/cost totals per action (to enforce caps and track margin).
Product analytics: anonymized funnel events (PostHog). Payments are handled by Stripe — we never see or store your card number.

How we handle your proposal content (retention)

Default-delete after the scan. Uploaded draft files and extracted draft text are deleted once the scan completes — on success and on failure. We keep only the line-item findings report so you can review and re-check.
One-click delete-all. You can delete your scans, findings, and uploaded proposals at any time from your settings (Danger zone) — immediate and irreversible. Per-period usage counts (which contain no proposal content) are retained to enforce monthly limits.
No model training. We do not train AI models on your content, and our AI provider does not use API content for training.
The shared, public requirements matrix (keyed by a solicitation's content hash) contains only the extracted administrative requirements of the public solicitation — never your draft.

Subprocessors

We use vetted providers to operate the Service: Clerk (auth), Supabase (database & file storage), Anthropic (AI inference), Stripe (billing), Upstash (rate limiting), Inngest (background jobs), Resend (email), PostHog (analytics), and Vercel (hosting). Each processes data only to provide its function.

Your choices & rights

You can access, export, or delete your data, and close your account. Email privacy@solicitfit.com for any request. Optional US data residency is available for Team customers on request.

Restrictions

Do not upload classified, ITAR-controlled, or CUI material — SolicitFit is not authorized to process it. The Service is not directed to children under 18.

Changes & contact

We'll reflect material changes by the "last updated" date. Questions: privacy@solicitfit.com.

SolicitFit audits your human-written draft for administrative compliance. It does not write proposal content and is not legal advice or a guarantee of acceptance. Don't upload classified / ITAR / CUI material.