Privacy Policy
Last updated: September 18, 2026
1. Overview
SoliContraX("we," "us") is an AI-assisted workspace for responding to funding incentive notices — grant applications, business plans, and presentation decks. This Policy explains, in plain terms, what personal information we collect, why, who we share it with, and the choices you have — with particular attention to the rights of U.S. state residents. Using our website and application (the "Service") means you accept this Policy and our Terms of Service. If you do not agree, do not use the Service.
In short: we never sell or share the content you upload or generate, and we do not train public AI models on it.On our public marketing pages, and only with your consent, we use advertising tags from Meta, LinkedIn, and Google to measure our ads. Under California law that limited website activity may count as "sharing" personal information, so you can opt out at any time at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control signals automatically. For a summary of your privacy choices (including California rights), see Your Privacy Choices (Section 12).
2. Who we are
Data controller: SoliContraX (Delaware, USA)
Privacy contact: our contact form (select Privacy / Data Request (CCPA))
General inquiries: our contact form
3. Information we collect
Account and identity
- Account data — your email, password, and profile details, handled by our authentication provider. We store a user identifier to link your activity to your account.
Content you provide
- Uploaded documents — funding notices and knowledge-base files, plus their file names and types.
- Text you enter — concepts, commercial briefs (buyer, problem, offer, audience, ask, traction), pitches, chat messages, client names, optional industry labels, and search queries.
- AI outputs — concepts, extractions, outlines, proposal sections, compliance matrices, commercial readiness reports, slide deck JSON, deck quality reports, and chat replies generated on your behalf.
- Extracted contacts — names, titles, emails, and phone numbers parsed from funding notices when present in uploaded documents.
- CRM records — contacts (agency points of contact, client contacts, partners, stakeholders), client organization profiles, and the notes and history you add. You control these records; they are included in your data export and account deletion. Agency points of contact captured from public funding notices are professional, public-directory information about people acting in their official capacity.
- Pursuit-management data — pipeline stages, tasks and checklists, deadlines, financial fields (requested and actual award amounts, match notes), and activity history. We use this to run the Service for you; we do not use it for cross-customer benchmarking or marketing without separate notice.
We transmit and store the contents of a document only when you select it for upload. Documents you upload may contain personal information about other people. You are responsible for having a lawful basis to upload and process it.
Sensitive personal information
We do not ask you to provide sensitive personal information (such as Social Security numbers, government IDs, financial-account numbers, or health data). Documents you upload may incidentally contain it. We process sensitive personal information only as needed to provide the features you request (for example, parsing a funding notice) and for security and legal compliance — never to infer characteristics about you. Do not upload classified material, Controlled Unclassified Information (CUI), or other data you are not authorized to share.
Billing and usage
- Payments — our payment processor handles credit purchases. We receive transaction metadata (amount, currency, a transaction reference), not your full card number.
- Usage — credit balance, purchase and consumption records, and internal logs of AI usage (including token counts and estimated costs).
Technical data
- Account identifiers, timestamps, notification records, file references, embedding vectors derived from your content, and server logs needed to run and secure the Service.
- Extracted text and content fingerprints — the plain text we extract from a document you upload (retained so we do not re-process the same file repeatedly) and a one-way content fingerprint (a hash of the file) used to detect and skip duplicate uploads.
- Our infrastructure providers may log IP addresses, user agents, and request metadata for security and operations.
- Advertising and measurement data (public pages, with consent)— when you accept advertising cookies, our advertising partners' tags may collect your IP address, device and browser information, the pages you view on our public site, a cookie or click identifier from an ad you clicked (for example a Facebook click ID or Google click ID), and conversion events such as completing sign-up or purchasing credits. These tags run only on our public marketing pages and on the sign-up and purchase confirmation screens; they never run on your workspace pages and never receive the content of your documents.
4. How we use information
- Provide, maintain, and secure the Service, including sign-in, storage, and search.
- Run AI-assisted workflows — parsing funding notices, generating concepts and drafts, chat, and retrieval over your documents.
- Process payments, manage credits, and prevent fraud or abuse.
- Send in-app notifications and deadline reminders.
- Enforce our Terms, protect security, and comply with law.
- Analyze aggregate usage and internal costs to run the business.
- With your consent, analyze optional product-usage events (such as help tooltip and onboarding tour interactions) and product analytics to improve the Service.
- With your consent, measure the results of our advertising and show ads for SoliContraX to people who visited our public site (see Cookies and Sale and sharing).
We do not sell your personal information for money, and we do notuse your content to train public AI models. Content is sent to our AI providers only to deliver features you request. The only activity that may qualify as a "sale" or "sharing" under state privacy law is the consent-gated advertising measurement on our public pages described in Sections 6 and 11, and you can opt out of it at any time.
Financial incentives: We may offer promotional credits at our discretion. These offers are not conditioned on you providing additional categories of personal information beyond what is needed to create and use an account.
5. Artificial intelligence
The Service uses large language models and embedding models to analyze documents, generate text, score concepts, and power chat. This is automated assistance, not a substitute for your professional judgment — outputs may be inaccurate or incomplete, so review all materials before use.
When you use AI features, relevant portions of your uploads, concepts, and chat history may be sent to our AI service providers for the duration of the request. We store prompts, outputs, and embeddings as described in Section 3.
Service features: SoliContraX supports multiple engagement types including grant proposals, business plans, and presentation decks (with variants such as pitch, vision, product demo, investor briefing, and government briefing). Each engagement type uses AI to assist with extraction, concept development, drafting, and quality assessment.
Automated scoring: The Service may generate advisory scores or grades (for example, on concepts you submit). These are recommendations only — they do not produce legal or similarly significant effects, and you remain responsible for all decisions and submissions.
7. Service providers
We share information with the following service providers that help us run the Service. Each processes data on our instructions under their agreements with us:
- Authentication provider — Sign-in, session management, and account credentials.
- Data hosting provider — Secure storage of account data, uploaded files, and generated content.
- AI service provider — Large language models and embeddings for document analysis, generation, and chat.
- Background processing provider — Orchestration of long-running document and generation workflows.
- Payment processor — Payment processing for credit purchases.
- Application hosting provider — Application hosting and serverless execution.
- Product analytics provider — Consent-gated product analytics, session replay, and feature experiments.
- Error monitoring provider — Application error and performance reports (stack traces, request metadata).
- Email delivery provider — Transactional email — contact-form confirmations, welcome and account messages.
- Bot-protection provider — CAPTCHA challenges on public forms (device and network signals only).
Advertising partners (not service providers).With your consent, the advertising partners named in Section 6 receive limited website-activity data from their tags on our public pages. Unlike the service providers above, they may use that data for their own purposes under their own policies, which is why state law may treat it as "sharing" and why we offer an opt-out at Do Not Sell or Share My Personal Information.
We may also disclose information when required by law, to protect rights and safety, or in connection with a merger or sale of assets (with notice where appropriate).
Sharing at your direction. If you enable the calendar feed, we make a read-only iCalendar (.ics) feed of your pursuit deadlines and dated tasks available at a private URL that contains a secret token. Anyone with that URL can view the feed, so treat it like a password. Enabling the feed is optional; you can rotate the token at any time to revoke every previously shared URL. We do not email, transmit, or otherwise disclose your pursuit data to any third party except the service providers listed above.
8. Data location
We are based in and operate the Service from the United States. Your information is processed and stored in the U.S. by us and our service providers. We do not target the Service to individuals in the EEA, UK, or Switzerland and do not rely on EU transfer mechanisms.
9. Security and retention
We protect your information with measures including encryption in transit, logical separation of customer data, and access controls on production systems. No method of transmission or storage is completely secure.
We retain information according to the following schedule (or as required by law):
| Data type | Retention |
|---|---|
| Account records | While your account is active, plus up to 3 years after closure for legal and audit purposes |
| Uploaded documents, embeddings, chat, and AI outputs | Until you delete the content or close your account; backups may persist up to 30 days |
| Uploaded files never attached to a client or pursuit | Automatically deleted about 7 days after upload if never assigned to a client or opportunity |
| Billing and credit records | Up to 7 years for tax, accounting, and fraud-prevention obligations |
| Server and security logs | Typically 30–90 days, unless needed for an active investigation |
| Background job and event logs | Generally 30–90 days, unless needed for operations or security |
| Advertising cookies (public pages, with consent) | Set by the advertising partner in your browser; lifetimes are set by each partner (commonly 90 days to 2 years) and end when you clear cookies or opt out |
You can delete certain content in the application. For account deletion or broader erasure, see Section 10. Backups and logs may persist for a limited period after deletion.
10. Your privacy rights
Depending on where you live, you may have the right to:
- Know, access, correct, delete, and obtain a portable copy of your personal information.
- Opt out of the "sale" or "sharing" of personal information (see Section 12 and Do Not Sell or Share My Personal Information).
- Limit the use and disclosure of sensitive personal information.
- Appeal a denied request and not be discriminated against for exercising these rights.
These rights are available to residents of California (CCPA/CPRA) and, to the extent applicable, other U.S. states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah).
How to submit a request
Submit a request through our contact form and select the Privacy / Data Request (CCPA) category, then tell us what you are asking for (access, deletion, correction, or portability). We will verify your identity using information associated with your account before fulfilling the request.
- Response time: We aim to respond within 45 days. If we need more time, we will notify you (up to an additional 45 days where permitted).
- Authorized agents: California residents may use an authorized agent. The agent must provide proof of authorization and we may verify your identity directly.
- Appeals: If we deny your request, you may reply to our response to appeal. We will explain our decision in writing.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
California residents: see also Section 11 and Your Privacy Choices (Section 12).
11. California residents (CCPA/CPRA)
This section supplements the Policy above for California residents. In the preceding 12 months, we have collected the categories of personal information below. We do not sell personal information for money. With your consent, we "share" identifiers and internet activity from our public pages with advertising partners for cross-context behavioral advertising, as described under Sale and sharing below.
Categories collected
| Category | Examples in SoliContraX | Source | Business purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Account ID, email, client names; advertising cookie and click identifiers (public pages, with consent) | You; authentication and payment providers; advertising partners' tags | Account, billing, support; ad measurement | Authentication, payment, data hosting, email delivery, and application hosting providers; advertising partners (cookie and click identifiers only, with consent — "shared") |
| Customer records | Payment metadata, credit balance and usage, promo redemptions | You; payment processor | Billing, fraud prevention | Payment processor, data hosting provider |
| Commercial information | Credit purchases and usage history | You; payment processor | Provide paid features | Payment processor, data hosting provider |
| Internet / network activity | IP address, user agent (infrastructure logs); public-page views and conversion events (with consent) | Your device; hosting providers; analytics and advertising tags | Security, operations, product analytics, ad measurement | Application hosting, authentication, product analytics, error monitoring, and bot-protection providers; advertising partners (public-page activity only, with consent — "shared") |
| Professional / business information | Funding notices, proposals, extracted agency contacts, chat content | You; AI extraction | Core Service delivery | Data hosting, AI, background processing, and application hosting providers |
| Inferences | Concept grades, pursue/pass signals, generated summaries | AI processing of your content | Advisory features you request | AI and data hosting providers |
| Sensitive personal information | May appear incidentally in uploads (e.g., IDs in funding notices) | Your uploads | Provide parsing and drafting features you request | Data hosting, AI, and background processing providers |
Sensitive personal information — limit use
We use sensitive personal information only to provide the Service you request and for security and legal compliance. We do not use it to infer characteristics about you for unrelated purposes. California residents may request that we limit use of sensitive personal information through our contact form (select Privacy / Data Request (CCPA)).
Sale and sharing
We do not sell personal information in exchange for money. In the preceding 12 months we have "shared" (as the CCPA/CPRA defines it) the following categories with advertising partners for cross-context behavioral advertising: identifiers (advertising cookie and click IDs) and internet or network activity (public-page views and conversion events). This happens only on our public marketing pages, only after you choose Accept all, and never for account content. We do not knowingly sell or share the personal information of consumers under 16.
Right to opt out. You can opt out at any time at Do Not Sell or Share My Personal Information. We also honor the Global Privacy Control signal as a valid opt-out. Opting out stops advertising tags from loading in that browser; it does not affect strictly necessary cookies, your account, or any credits you purchase. See Your Privacy Choices (Section 12) for more detail.
12. Your Privacy Choices
SoliContraX respects your privacy. This section summarizes key choices available to you, especially if you are a California resident under the CCPA/CPRA. Sections 10 and 11 above provide additional legal detail.
Do Not Sell or Share My Personal Information
With your consent, advertising tags on our public pages share limited website activity with Meta, LinkedIn, and Google so we can measure our ads. You can opt out of that sharing in one click — no account or verification needed — at /privacy/choices. The choice is stored in your browser, so repeat it on each browser or device you use. It does not affect your account, your content, or strictly necessary cookies.
We do not sell personal information for money, and we never share the content you upload or generate for advertising.
Global Privacy Control (GPC)
If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of the sale or sharing of personal information: advertising tags will not load in that browser, even if you choose Accept all in the cookie banner. The choices page shows whether we detected the signal.
Limit use of sensitive personal information
California residents may ask us to limit use of sensitive personal information to what is necessary to provide the Service. We already use sensitive personal information only to deliver features you request and for security and legal compliance. To submit a limit request, use our contact form (select Privacy / Data Request (CCPA)).
Access, delete, and correct your data
You can:
- Delete individual documents, clients, opportunities, and proposals in the application.
- Clear concept chat history from within a concept session.
- Request account deletion or a copy of your data by emailing us (see below).
We will verify your identity before fulfilling requests and respond within 45 days (or notify you if we need additional time). We will not discriminate against you for exercising these rights. For formal requests, see Section 10.
How to contact us
Submit a request through our contact form and select the Privacy / Data Request (CCPA) category, then describe what you need. Authorized agents may submit requests on your behalf with proof of authorization.
California-specific disclosures and category tables: Section 11 — California residents.
Cookies
We use strictly necessary cookies for sign-in and security. Optional analytics and advertising cookies and similar technologies run only with your consent. See the Cookies section (Section 6) for details, or use to update your choice.
13. Children
The Service is for business users and is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children.
14. Changes
We may update this Policy from time to time. We will post the revised version here and update the "Last updated" date. Material changes may be communicated by email or in-app notice where appropriate.
15. Contact
Privacy questions and requests: our contact form (select Privacy / Data Request (CCPA)).
See also our Terms of Service and Your Privacy Choices (Section 12).