Privacy Policy

GovLadder ("we", "us", "our") operates the GovLadder application at app.govladder.com, your personalized government contracting agent. This policy explains what we collect, how we use it, and who processes it.

Information you provide:

• Account information: name, email address, password
• Company profile: business name, NAICS codes, employee count, revenue range, years in operation, structure
• Location: state, county, city, and operating locations
• Ownership information used for certification eligibility matching
• Government identifiers you choose to add: EIN, UEI, CAGE code, DUNS, SAM.gov status
• Documents and solicitations you upload or link so your agent can read them
• Company intelligence you import: past performance, key personnel, teaming partners

Information collected automatically:

• Usage data: pages visited, features used, agent runs started
• Device information: browser type, operating system
• IP address

We never ask for, store, or send to the model a Social Security number, a bank account or routing number, or a payment card number. When a government form requires one, you enter it yourself in your own session on the government site. Your agent stops at that field.

• To match your business to certification and registration programs
• To let your agent prepare applications, capture packs, and proposal drafts for your review
• To watch renewals and SAM.gov status and remind you
• To process payments and manage your subscription
• To send transactional emails (confirmations, approvals waiting, renewal reminders)
• To improve the service and fix bugs
• To comply with legal obligations

Your agent runs on Anthropic's Claude models. When it works on a task, the profile fields, documents, and solicitation text that task needs are sent to Anthropic's API to generate the result. We do not send your data to any other AI provider, and we never send SSNs, bank details, or card numbers. Anthropic's API terms apply to data processed there.

Text the agent reads from third-party documents and websites is treated as untrusted input. Instructions found inside those sources are ignored and flagged to you.

We do not sell your personal information. The following services process data on our behalf:

• Anthropic: runs the model behind your agent; receives only the profile and document text a task needs
• Supabase: database and authentication (hosted on AWS)
• Vercel: application hosting and anonymous page analytics
• Stripe: payment processing; we never see your full card number
• Resend: transactional email such as confirmations and reminders
• Sentry: error monitoring, with personal data scrubbed from traces
• Legal authorities: if required by law or to protect our rights

Nothing is sent to a government agency, a contracting officer, or any other outside party by your agent without your explicit approval on the card that shows the exact content.

Your data is stored in Supabase (hosted on AWS). We use encrypted connections (TLS), row-level security policies, signed session verification on write routes, and regular security reviews. No system is perfectly secure; use a strong, unique password for your account. See our security page for the current controls.

We retain your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where required by law (billing records are retained for 7 years).

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing emails (unsubscribe link in each email)

To exercise these rights, email support@govladder.com.

We use cookies for authentication (Supabase session cookies) and to remember your preferences. We do not use third-party advertising cookies. Disabling cookies in your browser prevents signing in.

GovLadder is not intended for users under 18. We do not knowingly collect personal information from minors. If we learn we have, we delete it promptly.

We may update this policy from time to time. We notify you of material changes by email or by a notice in the service. Continued use after changes constitutes acceptance.

Questions about privacy? Email support@govladder.com.