Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and encrypted password. When you use our platform, we collect usage data including search queries, contract interactions, and feature usage to improve our services. We do not sell your personal information to third parties.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Kontrakk platform
• Personalize your contract and grant discovery experience
• Generate AI-powered proposal drafts and NAICS code recommendations
• Send service-related communications
• Improve and develop new features

3. Data Sources

Contract and grant data displayed on Kontrakk is sourced from publicly available federal databases including SAM.gov and Grants.gov. This data is publicly available and is refreshed daily through automated processes. Kontrakk does not claim ownership of government contract data.

4. AI Processing

Kontrakk uses AI (powered by Anthropic Claude) to provide NAICS code detection and proposal email generation. When you use these features, your query or contract details are sent to Anthropic's API for processing. We do not store AI-generated outputs beyond your active session unless you explicitly save them. Refer to Anthropic's privacy policy for their data handling practices.

5. Data Security

We implement industry-standard security measures to protect your data. Passwords are hashed using bcrypt with a cost factor of 12. Sessions are managed via JSON Web Tokens (JWT). All data in transit is encrypted via HTTPS/TLS. Our infrastructure is self-hosted and not dependent on third-party SaaS platforms for core data storage.

6. Data Retention

Account data is retained for as long as your account is active. Contract and grant records that are no longer active are soft-deleted and permanently purged after 90 days. You may request deletion of your account and associated data at any time by contacting [email protected].

7. Cookies

Kontrakk uses cookies in two categories. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Essential cookies are required for the site to function and cannot be disabled. These include:

• Authentication session token (NextAuth.js session cookie)
• Cookie consent preference (records whether you accepted or declined cookies)

Preference cookies are set only with your consent. These include:

• Returning user indicator (remembers that you have signed in before to personalize your experience)
• Chat session identifier (stored in your browser to associate searches with your browsing session)

You can change your cookie preferences at any time by clearing your browser cookies. Declining preference cookies does not affect your ability to use Kontrakk.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of any material changes via email. Continued use of Kontrakk after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries, contact us at [email protected].