Privacy Policy

Effective July 8, 2026

This policy describes what SAMFERDI (operated by A PLACE TO RETURN TO LLC) collects and how it's used. The short version: we collect only what the product needs to work, we don't run ads or trackers, and we never sell your data.

1. What we collect

Account — your email address (used for sign-in links, digests, and copies of responses you send).
Company profile — the information you enter: company name, identifiers (UEI, CAGE), capabilities, past performance, NAICS codes, set-aside eligibility, geography, contract size preferences, and contact details.
Product activity — your match verdicts (interested/dismissed), drafts and edits, and what you send, so the product can function and improve your scoring.
Billing — handled entirely by Stripe. We store only your Stripe customer and subscription identifiers. We never see or store your card number.

We do not use analytics trackers or advertising cookies. Browser storage is used only for your session and interface preferences.

2. How we use it

To operate the Service: matching opportunities to your profile, generating drafts, sending digest and transactional emails, sending responses you approve, processing payments, and preventing abuse (e.g., rate limits). That's it.

3. AI processing

To score matches and generate drafts, your company profile and the relevant opportunity text are processed by Anthropic's Claude API. Per Anthropic's commercial terms, API inputs and outputs are not used to train their models.

4. Service providers

We use a small set of processors to run the Service: Cloudflare (hosting and database), Stripe (payments), Anthropic (AI processing), and Resend (email delivery). Each receives only what it needs to perform its function.

5. Sharing

We don't sell or rent your data. Information leaves the Service only when you direct it to (e.g., a response you approve is emailed to the recipient you chose) or when required by law.

6. Retention and deletion

We keep your data while your account is active. Email [email protected] to request deletion of your account and associated data; we'll complete it within 30 days, except records we must keep for tax or legal reasons (e.g., billing records held by Stripe).

7. Security

Data is encrypted in transit, stored on Cloudflare's infrastructure, and sign-in uses single-use expiring email links instead of passwords. No method is 100% secure, but we keep the attack surface deliberately small.

8. Changes and contact

If we make material changes to this policy we'll notify you by email or in the app. Questions: [email protected].