This policy covers BidSITREP (bids.veteransolutionstx.com), a service of Veteran Solutions, LLC, a Texas limited liability company based in Waco, Texas ("we," "us"). BidSITREP helps small businesses find federal contract opportunities on SAM.gov. It is for business use by adults. Our company privacy policy covers our website; the VetSITREP app has its own policy.
What we collect
Company information. The company name, website, state, and (optionally) UEI you give us when you register, plus the company profile you set up: NAICS codes, set-asides, states, keywords, and email preferences.
People. Each person's work email address and name, and for a new company the title and contact details of the applicant and of the company officer who approves the request.
Sign-in. BidSITREP has no passwords. We email a one-time link. We store a scrambled (hashed) copy of the link, your email address, the time, and the IP address that asked for it. Signing in sets one cookie (__Host-bsid) that keeps you signed in. It is required for the service to work. We use no advertising or tracking cookies.
What you do in the app. The notices we find for your company, and the status, notes, checklist answers, and changes you make to them; your searches and how many you have used; and a log of the emails we send (time, recipient, subject, and whether the mail server accepted it, with the most recent 300 kept; no message bodies or sign-in links).
Technical details. BidSITREP runs on Cloudflare, which processes technical details of each request (such as IP address, browser type, and page requested) to deliver and protect the service. We do not build profiles from them.
Where notice data comes from
Opportunity data comes from SAM.gov, the U.S. government's official source, through its public search service and public data files. Those notices are public information. When we search SAM.gov for you, the search carries your criteria (such as NAICS codes, set-asides, and dates), not your company's name or your people.
How we use it
To run BidSITREP: find and score notices for your company, show them to your team, and send you the emails you ask for (sign-in links, daily briefings, invitations, and approval messages).
To verify new companies before access opens, keep the service secure, and prevent abuse.
To answer questions and fix problems. We do not sell your information, share it for advertising, or use it to train AI models.
AI checklists
When you press the AI button on a notice, BidSITREP sends the notice's public solicitation documents and notice details to an AI model running on Cloudflare Workers AI (Cloudflare's data-usage page) to draft a requirements checklist. To improve results it may also send short examples of requirement wording that your own company previously corrected. It does not send your company profile, your notes, or anyone's email address. AI can miss or misread requirements; see the Terms.
Who can see your information
Your company's team. People you or your company's administrators add can see the company's profile and notices. Each person can also keep personal settings and private cards.
Us. Veteran Solutions staff can see company and account information as needed to review registrations, run and support the service, and keep it secure.
Service providers. Cloudflare (hosting, database, and AI) and our own mail server, which sends BidSITREP's email. We share information otherwise only when you ask us to or the law requires it.
How long we keep it
Sign-in links work once and expire in 15 minutes; expired links are deleted within a day. A session ends after 30 minutes without activity or 8 hours at most, and the app signs you out after 15 minutes idle.
Unconfirmed or replaced registration requests are deleted after 2 days; approved or declined requests are kept as a record of the review.
Company and account information is kept while the account is active. If a person is removed, their access ends at once and their private cards are deleted. If a company closes its account, we delete its profile, people, and notices on request, except records we need for legal or business reasons.
How we protect it
Connections use HTTPS. Sign-in uses one-time links that are stored only in hashed form, sessions are short, and removing a person signs them out immediately. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.
Your choices
You can ask what we hold about you or your company, ask us to correct it, or ask us to delete it. Email privacy@veteransolutionstx.com and we will respond within a reasonable time. Company administrators can manage people and the profile on the Team and Company profile pages. Depending on where you live, state law may give you additional rights, and we will honor valid requests.
Children
BidSITREP is a business tool for adults. We do not knowingly collect information from anyone under 18.
Changes
If we change how we handle information, we will update this page and its date, and for material changes tell users in the app or by email.