Privacy Policy

1. Who Is Responsible for Your Information

GovConUnited, LLC, a Robb Industrial Co. company, is the controller (or “business”) responsible for personal information described in this Policy. Contact details are in Section 18.

2. Information We Collect

2.1 Information you provide to us

• Account and registration information: first and last name, email address, password (stored in hashed form), the plan you select, and how you heard about us (optional).
• Profile information: headline and job title, employer, photo, bio, location, skills, security clearance level or certifications you choose to list, experience, contact details, and your visibility preferences.
• Company information: company name, logo, description, capabilities and services, NAICS codes, UEI, CAGE Code, certifications and set-asides (such as 8(a), WOSB, HUBZone, and SDVOSB), past performance, service areas, website, and contact information.
• Content you create: posts, comments, reactions, saved items, messages and conversations, community memberships, job postings and applications (including resumes or profile information you submit), event submissions and registrations, opportunity and teaming postings, and resource requests.
• Bid Tracker and saved searches: bids you track, stages, notes, tasks, deadlines, and saved search criteria.
• Payment information: for paid plans, billing name, email, billing address, and payment details are collected and processed by our payment processor, Stripe. We receive limited information such as card brand, last four digits, expiration date, plan, and transaction status. We do not store full card numbers.
• Communications: messages you send to us through the Contact Us form, our support chat, or email, and your responses to surveys.

2.2 Information we collect automatically

• Device and log data: IP address, browser type and version, operating system, device identifiers, language, referring and exit pages, pages and features viewed, links clicked, search queries entered on the Service, dates and times of access, and error and crash information.
• Usage data: activity needed to operate features such as saved items, follows, connections, notifications, messaging, plan-limit counters (for example, monthly message and job-application allowances), and profile and post engagement statistics.
• Approximate location: derived from your IP address, and any location you enter in your profile or search filters.
• Cookies and similar technologies: described in Section 6.

2.3 Information from other sources

• Sign-in providers: if you register or log in with Google, Facebook, or LinkedIn, we receive the information you authorize them to share, which typically includes your name, email address, profile photo, and a unique account identifier.
• Public and government data sources: opportunity notices and related agency, award, and entity information from public sources such as SAM.gov. This is generally business information; it may include names and business contact details of government points of contact or contractor representatives.
• Other members and companies: information that others provide about you, such as an invitation, a connection, a mention, a team or company-page role, or a job application sent to you.
• Service providers and partners: payment, fraud-prevention, analytics, email-delivery, and support providers may give us information such as delivery status or payment confirmation.

3. How We Use Information

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If the GDPR or UK GDPR applies to you, we process personal data on these bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, improve, and promote the Service, prevent fraud, and operate a professional network, where our interests are not overridden by your rights); consent (for example, certain cookies and marketing emails, which you can withdraw at any time); and legal obligation (to comply with law). Where we rely on legitimate interests, you may object as described in Section 12.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, except as described in Section 6 if advertising partners are enabled for visitors. We share information in these ways:

• With other members and the public, as you direct. Your profile, company page, posts, comments, events, jobs, and opportunity postings are visible according to the features you use and your visibility settings. Some information may be visible to people who are not logged in and to search engines. Messages are visible to the participants in the conversation.
• With service providers (processors) that help us operate the Service under contracts that limit their use of your information, such as providers of cloud hosting, database and authentication, email delivery, customer support and chat, analytics and performance monitoring, security and fraud prevention, and payment processing (Stripe).
• With sign-in providers (Google, Facebook, LinkedIn) when you choose to use them.
• With advertisers and ad partners, only in the limited ways described in Section 6. We do not give advertisers your name, email address, or profile information.
• For legal reasons and safety: to comply with law, regulation, legal process, or governmental request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; and to protect the rights, property, and safety of GovConUnited, our members, and the public.
• In a business transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred subject to this Policy’s protections.
• With your consent or at your direction, for example when you apply to a job and your application is sent to the employer, or when you register for an event hosted by a third party.
• Aggregated or de-identified information that does not reasonably identify you may be shared for any purpose.

Third-party recipients. When you apply to a job, register for an event, or message a company, the receiving member or organizer becomes responsible for how they use what you send. Their privacy practices are their own.

6. Cookies, Advertising, and Similar Technologies

We and our providers use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, secure the Service, measure performance and usage, and, where enabled, show advertising.

You can control cookies through your browser settings, and you can delete existing cookies. Global Privacy Control and Do Not Track: where required by applicable law, we treat a recognized Global Privacy Control signal as a request to opt out of sale or sharing for advertising. There is no industry standard for “Do Not Track” browser signals, so we do not respond to them otherwise.

7. Sign-In With Google, Facebook, or LinkedIn

If you use a third-party sign-in, we receive the data you authorize and link it to your GovConUnited account. From Google we receive only your name, email address, and profile picture, and we use them only to create and secure your account and display your profile; we do not sell them or use them for advertising. GovConUnited's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not post to those services on your behalf. You can revoke our access at any time in the settings of the third-party service. We may continue to hold information you already provided to us until you delete it or your account.

8. Public Visibility and Your Visibility Settings

GovConUnited is a professional network. Information you place in public areas can be copied, indexed by search engines, and used by others, and we cannot control what others do with it. Review your profile, company-page, and post visibility in Account Settings. Removing a post or profile from the Service does not remove copies made by others or cached by search engines.

9. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Service. After you close your account, we delete or de-identify your personal information within a reasonable period, normally within 30-90 days, except for information we must or may keep for legal, tax, accounting, security, dispute-resolution, and fraud-prevention purposes (for example, billing records, records of violations, and information in backups, which is overwritten on a regular cycle). Content you shared with others (such as messages already delivered) and posts quoted or saved by other members may remain. Server logs are kept for a limited period.

10. Security

We use technical and organizational measures designed to protect your information, including encrypted connections (HTTPS/TLS), hashed passwords, row-level security and role-based access controls in our database, limited staff access, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Use a strong, unique password, and tell us immediately if you suspect unauthorized access to your account.

Do not send classified information, controlled unclassified information (CUI), or export-controlled data through the Service.

11. International Transfers

GovConUnited is based in the United States, and we and our providers process information in the United States and potentially other countries where data protection laws may differ from yours. When we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, where applicable.

12. Your Choices and Rights

12.1 Choices available to everyone

• Access and update: view and edit your profile, company, and preferences in Account Settings.
• Delete content or your account: delete posts, messages you sent, and your profile, or request account deletion from Account Settings.
• Marketing emails: click “unsubscribe” in any marketing email or change preferences in Account Settings. We will still send transactional and legal notices.
• Notifications: manage in-app, email, and bid-deadline reminders in your notification settings.
• Cookies and ads: see Section 6.
• Sign-in providers: revoke access in those providers’ settings.

12.2 Additional rights, depending on where you live

Depending on your location (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other U.S. states with privacy laws, the EEA, the UK, Switzerland, Canada, and elsewhere), you may have the right to:

• know and access the personal information we hold about you, and obtain a portable copy;
• correct inaccurate information;
• delete your personal information, subject to exceptions;
• opt out of the sale or sharing of personal information, and of targeted advertising and profiling in furtherance of decisions with legal or similarly significant effects (we do not sell personal information);
• limit the use of sensitive personal information (we do not use sensitive personal information to infer characteristics about you);
• object to or restrict certain processing, and withdraw consent at any time;
• not be discriminated against for exercising your rights;
• appeal our decision on your request, where your state provides for appeals; and
• lodge a complaint with your data protection authority or, in the U.S., your state attorney general.

12.3 How to make a request

Email privacy@govconunited.com or use the Contact Us form at govconunited.com/contact and choose “Privacy.” We may need to verify your identity, for example by matching information to your account or by asking you to respond to a message sent to your account email. You may use an authorized agent to submit a request; we may ask for proof of authorization. We respond within the time required by law (generally 30 to 45 days). We may deny a request where permitted, for example where we cannot verify you or an exemption applies, and we will explain why.

13. Additional Information for California Residents

This section supplements the Policy for California residents under the California Consumer Privacy Act as amended (CCPA/CPRA). In the past 12 months we collected the following categories of personal information, as described in Section 2, and disclosed them for a business purpose to the categories of recipients in Section 5:

We do not sell personal information and do not knowingly sell or share personal information of consumers under 16. We retain categories of information as described in Section 9. California residents may also request information about the categories of personal information we shared with third parties for their direct marketing purposes in the preceding calendar year (Shine the Light law, Cal. Civ. Code § 1798.83).

14. Additional Information for Individuals in the EEA, UK, and Switzerland

Controller: GovConUnited, LLC (contact in Section 18). Justin Miles In addition to the rights in Section 12, you may request restriction of processing and object to processing based on legitimate interests or for direct marketing. You may complain to your local supervisory authority.

15. Children

The Service is for business and professional use by people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

16. Third-Party Links and Services

The Service contains links to and integrations with sites, events, and resources run by others, including government websites, event registration pages, job and employer sites, and advertisers. This Policy does not apply to them. Review their privacy policies before sharing information.

17. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email, through the Service, or by changing the “Last updated” date above, and where required by law we will obtain your consent. Your continued use of the Service after the effective date means you accept the updated Policy.

18. Contact Us

If you have questions, concerns, or requests about this Policy or our privacy practices, contact:

• GovConUnited, LLC, Attention: Privacy, 249-24 145th Avenue, Rosedale, NY, 11422
• Email: biz@govconunited.com
• Online: the Contact Us form at govconunited.com/contact