Privacy Policy

Last updated: July 2026

This Privacy Policy describes how Farfield Labs, LLC ("Farfield Labs," "ContractForgeAI," "we," "us," or "our") collects, uses, and shares information in connection with the ContractForgeAI platform, including Opportunity Forge, RFP Forge, Talent Intel, and Vantage (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account & Company Information

When you register, we collect your email address, password (stored as a salted hash, never in plain text), and any company information you provide, such as company name, UEI/CAGE code, NAICS codes, certifications, and past performance records used to generate proposals and match opportunities.

Candidate & Recruiting Data (Talent Intel)

If you or your organization use Talent Intel, we process candidate information submitted through job applications or uploaded by your team, including resumes, contact details, work history, and — where voluntarily provided and relevant to a role's requirements — security clearance status. This data is stored on a per-company, access-controlled basis and is never shared across unrelated companies.

Payment Information

Subscription payments are processed by Stripe, Inc. We do not store your full card number on our servers; Stripe handles payment data under its own privacy and security practices (see Stripe's privacy policy at stripe.com/privacy).

Usage & Device Information

We automatically collect standard technical data — IP address, browser type, device identifiers, pages visited, and timestamps — to operate, secure, and improve the Services.

2. How We Use Information

  • To provide, operate, and maintain the Services you sign up for
  • To generate AI-assisted proposal content strictly from your own company's verified data — we do not train shared models on your confidential business information
  • To match opportunities, candidates, and jobs using the data you or your organization provide
  • To process payments and manage subscriptions
  • To send account, security, and transactional communications (confirmation codes, invitations, billing notices)
  • To detect, investigate, and prevent fraud, abuse, and security incidents
  • To comply with legal obligations

3. How We Share Information

We do not sell your personal information. We share information only with:

  • Service providers who process data on our behalf under contractual confidentiality obligations, including Supabase (database, authentication, and file storage), Resend (transactional email delivery), OpenAI (AI-assisted drafting and matching), Stripe (payment processing), Dropbox Sign (e-signature workflows), and Vercel (application hosting)
  • Other members of your own company account, consistent with the roles and permissions your organization configures
  • Government or public data sources such as SAM.gov, which we query to surface contract opportunities — this is public data, not data we disclose about you
  • Legal authorities, where required by law, subpoena, or valid legal process
  • A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this policy's protections continuing to apply

4. Data Security

We use industry-standard safeguards including encryption in transit (TLS), row-level access controls scoped to your company account, and audit logging of security-relevant events. We are actively working toward formal SOC 2 Type II attestation; until that attestation is complete, no compliance certification should be inferred beyond what is stated here. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain account and company data for as long as your account is active. Candidate data in Talent Intel is retained per your organization's own retention settings. Upon account termination, we will delete or anonymize personal data within a commercially reasonable period, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. California residents have rights under the California Consumer Privacy Act (CCPA), and residents of other jurisdictions may have similar rights under applicable law. To exercise these rights, contact us at privacy@contractforgeai.com. We will respond within the time required by applicable law.

7. Cookies

We use essential cookies to keep you signed in across the ContractForgeAI suite of products (opportunity-forge, talent, and vantage subdomains) and, where enabled, analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

8. Children's Privacy

The Services are intended for business use by adults and are not directed to children under 16. We do not knowingly collect personal information from children.

9. International Users

The Services are hosted in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here with a revised "Last updated" date, and where changes are material, we will provide additional notice (such as email).

11. Contact Us

Farfield Labs, LLC
16150 Wildwood Ct, Punta Gorda, FL 33982
privacy@contractforgeai.com