Privacy

Privacy policy

This page says what RFPTriage stores and who can answer a question about it. Write to dave@rfptriage.com.

Last updated October 17, 2026.

Account

When you create an account we store your name, email address, and company, and a salted hash of your password. We do not store the password itself.

Sign in with Google is available when Google sign-in is turned on for this site. Google sends us the account subject id, the name, the email address, and whether Google has verified that email. We do not receive your Google password. If that email is already on an RFPTriage account, we link the Google subject to it. A new Google account gets the same free trial as an email signup.

Solicitations and matrices

Files you upload, the compliance matrix, row status, owners, draft excerpts, and your pass or fail on a draft are stored on the server for that account. The sample solicitation is part of the app and is not one of your uploads.

Sign-in session

After you sign in, the browser keeps an httpOnly session cookie. Signing out or deleting the account clears that session.

Email

Password reset messages are sent when email delivery is configured. A signup note can also be sent to the operator. The from address is dave@rfptriage.com. If email delivery is not configured, a new account can still be created without a confirmation message.

Payments

Stripe processes card payments. We keep the plan on the account. We do not store the full card number.

Generate

When the server has an xAI key, Generate sends the text of the uploaded files to xAI so requirement rows can be labeled. Citations and page numbers come from the documents. We do not use your uploads to train a model of our own. When that key is not set, Generate does not send the documents to a model.

Analytics

A Google Analytics tag is added only when a measurement id is set on the server. It stays off while that value is blank.

What we do not do

We do not sell account or solicitation information.

Deletion

Delete account on the Account page removes the user, the sessions, the opportunities, and the uploaded files for that account from this server.

Contact

Questions about this page: dave@rfptriage.com.

Privacy | RFPTriage