# **GOPursue Privacy Policy** ## **1. Who we are and what this covers** GOPursue (the "Service") is an AI-assisted platform for government contracting pursuit, qualification and proposal work. It is offered by GovOps Systems, LLC ("GovOps," "we," "us"). Imeritas, LLC ("Imeritas") develops, hosts and operates the Service for us as our technology subcontractor. This policy explains how we handle personal information in connection with the Service. The Service is for business use only. It is not offered to consumers, and you must be at least 18 years old to use it. This policy is referenced in our Terms of Service. ## **2. Information we handle** **Account information.** Information you or your organization give us to create and manage an account. Examples could include name, work email address, roles, basic company information. **Customer Data.** Content you or your authorized users submit to the Service, such as solicitation documents, company information and proposal materials. Customer Data may include personal information, for example names and contact details of people at your organization or in a solicitation. Our Terms prohibit submitting classified information, Controlled Unclassified Information, protected health information, payment card data and government-issued identification numbers. **Output.** Content the Service generates in response to Customer Data, such as analyses, compliance matrices, scores and draft proposal text. **Usage and activity information.** Records of how the Service is used, such as when you sign in and which features you use. **Billing information.** Billing details we receive, such as your organization's billing contact and purchase order. We do not store payment card numbers. **Communications.** Messages you send us, such as support requests, and service emails we send you. **Public procurement data.** The Service retrieves opportunity data from SAM.gov and other public or licensed sources. This is not collected from you. ## **3. How we use information** - To provide, secure, support and improve the Service, including generating Output for you. - To create and manage accounts and authorize users. - To bill for subscriptions and process payments. - To send service messages, such as account, security and billing notices, and transactional emails from the Service. - To monitor performance and detect, investigate and prevent security threats and misuse. - To comply with law and enforce our Terms. ## **4. AI features and model training** The Service uses AI models, including large language models, to analyze Customer Data and produce Output. We do not use Customer Data or Output to train or fine-tune AI models made available to other customers, and we do not permit our AI model providers to do so, without your prior written consent. We may use aggregated, de-identified usage data, such as feature usage, performance and token consumption, that does not identify you or reveal Customer Data, to operate and improve the Service. AI Output can be inaccurate or incomplete. Please review it as described in our Terms of Service. ## **5. How we share information** We share information only as needed to run the Service: - **Imeritas**, which develops, hosts and operates the Service for us. - **Service providers** that help us deliver the Service, including cloud hosting, AI model providers, a payment processor and a transactional email provider. - **Your organization.** Your organization's administrators control user access and settings in your workspace. - **Legal and safety.** When required by law or legal process, or to protect the rights, property or security of GovOps, our customers or others. - **Business changes.** If the Service is assigned or sold, as the Terms allow, information may transfer to the successor. ## **6. Security** We maintain administrative, technical and physical safeguards designed to protect Customer Data, including tenant isolation, encryption in transit, role-based access controls and audit logging of AI agent actions and approvals. No system is completely secure, and we cannot guarantee absolute security. If we confirm unauthorized access to Customer Data, we will notify affected customers without undue delay and no later than 72 hours. ## **7. Retention, export and deletion** You can export Customer Data and Output using the Service's export features during your subscription. For 30 days after termination we make Customer Data available for export on request. We then delete Customer Data within 90 days, except for backups, which are deleted on their normal cycle, and data we must keep by law. ## **8. Your choices and rights** Customer administrators can manage users, roles and permissions in their workspace. To access, correct, export or delete personal information, or to ask a privacy question, contact us at the address below. If your information was submitted by your employer or another organization, we may direct your request to that organization. Depending on where you live, you may have additional rights under local law. ## **9. Cookies and similar technologies** We use a sign-in cookie to keep you signed in and a security cookie that protects forms from forgery. Your browser also stores one display preference, whether a shred's full text is open. We do not use analytics, advertising or tracking cookies. ## **10. Children** The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. ## **11. International use** The Service is operated from the United States and is intended for U.S. government contracting use. ## **12. Changes to this policy** We may update this policy. We will post the new version with a new "Last updated" date and give notice of material changes by email or in the Service. ## **13. Contact** GovOps Systems, LLC 62 Sartell Road, Waltham, MA 02451 Privacy questions: privacy@govopssystems.com General support: support@govopssystems.com, during business hours of 9am to 5pm ET