Privacy Policy

Information We Collect

We collect personal data to provide you with a more customized and efficient experience. Depending on how you interact with our Website, the types of information we collect may include:

• Contact Information: Name, email address, phone number, and mailing address.
• Business Information: Company name, size, location, industry, and capabilities.
• Account Information: Username, password, and other details necessary to create or maintain your account on CLEATUS.
• Technical Data: IP address, browser type and version, operating system, device type, and geographic location.
• Usage Data: Data about how you navigate and interact with our Website, including pages viewed, links clicked, and time spent on the site.

Separately, CLEATUS ingests publicly published US government procurement data and re-emits it through the Website and our AI connectors. This includes contract opportunity details, award histories, agency information, and government contact names and emails as published by public government sources. We do not collect this data from you; we surface records that are already public.

How We Use Your Information

We use the information collected for various purposes, ensuring that we provide you with the best possible experience and relevant service offerings. Specifically, we may use your information for the following:

• Service Delivery: To provide, operate, and maintain our services, including generating contract recommendations, writing proposals, and offering consulting assistance through CLEATUS.
• Personalization: To tailor content and recommendations based on your preferences and previous interactions with our platform.
• Communication: To send important notifications, such as service updates, offers, and relevant content based on your preferences.
• Payment Processing: To process subscription payments securely through third-party payment gateways. We do not store your payment information.
• Compliance: To ensure compliance with legal obligations and to protect the security of our platform.
• Analytics and Improvement: To analyze usage trends and improve the functionality, security, and effectiveness of CLEATUS.

Data Storage and Security

We take security seriously and implement a variety of measures to protect the personal data we collect. Data is stored and processed on secure cloud infrastructure operated by our hosting providers. We use encryption technologies such as Secure Socket Layer (SSL) for secure transmission of sensitive data.

Only authorized personnel have access to personal data, and we regularly review our security practices to ensure we protect your information from unauthorized access, disclosure, alteration, or destruction.

How We Share Your Information

We value your privacy and will never sell or rent your personal data to third parties. However, we may share your information in the following circumstances:

• Service Providers: We work with third-party service providers that assist us in delivering and improving our services. They act on our behalf under contracts that require them to keep your data secure and to use it only for the purposes we authorize. The categories we use are cloud hosting and content delivery, database and file storage, authentication, payment processing, email delivery, phone verification, product analytics, customer support messaging, artificial intelligence and machine learning processing, and website visitor identification.
• Legal Requirements: We may share your data if required to do so by law, such as to comply with legal obligations or to protect the rights and safety of CLEATUS, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity as part of the business transaction.

SMS and Text Messaging

If you text our support number, we collect your mobile number and the content of your message so that we can respond. We treat your inbound message as your consent to reply by text. We use this information only to answer your question and provide customer support, never for marketing or promotional messages, and we do not send marketing texts to anyone. Separately, if you ask us to verify a phone number in the product, we send a one-time verification code by text to the number you provide.

Mobile opt-in data and consent are not shared with any third party for marketing purposes. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for assistance. We retain message records only as long as necessary to provide support and to meet our legal obligations.

AI Assistants and Connectors

When you connect CLEATUS to a third-party AI assistant (such as Claude or ChatGPT) using our official connector, that assistant calls our API on your behalf using an OAuth access token bound to your CLEATUS account and a single workspace you select at the consent step.

Our server-side logs record metadata about each tool call: the tool name invoked, internal user, workspace, and token identifiers, the request outcome, and request latency. When a call fails, we additionally record an error code and a short (maximum 200 character) error description so we can investigate. We do not log the assistant's prompts, the arguments passed to a tool, or the response bodies returned. The data the connector reads or modifies is the same data you can see and modify in the CLEATUS web app — the connector does not collect new categories of personal information.

You can revoke a connector at any time from your CLEATUS account settings, which immediately invalidates the associated access token. Connector-related processing relies on the same categories of service providers described in "How We Share Your Information" above; no new categories of sub-processors are introduced specifically for connector processing.

AI Processing of Your Data

CLEATUS is an AI product. Contract recommendations, document analysis, and proposal drafting work by running your content through AI models. We run this inference with a small number of AI partners, spanning commercial cloud AI services and open-weight models, together with a quality-monitoring system that CLEATUS hosts itself. These partners process your content on our behalf and under our direction, and we do not sell your content.

Depending on the feature, the content processed can include your capture profile and company information, documents you upload, proposal drafts and other content you create in the product, your prompts, and the public procurement records the feature is working with. We may review AI requests and outputs internally to debug problems, measure quality, and improve the product.

We do not use your content to train AI models, and our AI partners do not use your content to train theirs. AI outputs in CLEATUS are recommendations for you to review, not automated decisions with legal or similarly significant effects.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations. After that, your data will be securely deleted or anonymized.

We may retain usage data for a shorter period, unless it is needed to improve security or the functionality of the Service, or if we are legally required to retain such data for a longer period.

Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our services. Cookies are small files that are placed on your device to store session data, remember user preferences, and track activity across our site.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Website and limit some features of the Service.

Website Visitor Identification

When you visit our Website, cookies and similar technologies may be used by our online data partners or vendors to associate your activity on our site with other personal information they or others have about you, including by association with your business email address. We (or service providers acting on our behalf) may then use this information to send communications and marketing to those email addresses. This person-level identification applies to visitors in the United States only.

You may opt out of this identification and the resulting advertising at any time by visiting apollo.io/company/privacy-center. Visitors in the EU or UK may also opt out of the collection of their personal data under GDPR by visiting apollo.io/company/privacy-center.

Your Rights and Choices

You have control over how your personal information is collected and used. In accordance with the California Consumer Privacy Act (CCPA) and other relevant laws, you have the right to:

• Access and Correction: You may request access to the personal data we hold about you, and you can ask for corrections to any inaccurate information.
• Opt-Out: You can opt-out of receiving marketing communications from us by following the unsubscribe instructions in any email or by contacting us directly.
• Opt-Out of Visitor Identification: You may opt out of third-party website-visitor identification and the associated advertising at any time by visiting apollo.io/company/privacy-center.
• Data Deletion: You can request that we delete your personal data. We will comply with such requests unless we are legally required to retain the information for certain purposes.

Data Retention and Deletion Requests

If you wish to have your personal data or content removed, you can request this by contacting us at info@cleat.ai. We will process your request promptly and ensure that your data is securely deleted if applicable.

CLEATUS SAM.gov Registration Assistant (Browser Extension)

The CLEATUS SAM.gov Registration Assistant stores the registration profile on your device. It contains no analytics, telemetry, or remote code. Online assistance is optional and starts off. When you turn it on, Chrome asks you to approve access to CLEATUS's service endpoint.

If you remove the extension, Chrome opens a page on this site in a new tab. We use that page view to count removals, because nothing in the extension reports anything while it is installed. It carries no identifier and no data from your registration, and the extension is already gone when it happens.

Online assistance sends redacted SAM.gov page structure. It never sends a value that you entered or a dropdown option. The request can include a field label, section heading, control type, selected field attributes, and a redacted page path. The extension removes known profile values and identifier patterns before transmission.

One option runs only after you press Fill. It sends labels from controls the extension could not identify. CLEATUS returns a matching field name, never data to enter for you.

A separate option runs when an unfamiliar SAM.gov page opens. It sends page labels and a redacted path to identify the registration step. On a page the extension has never seen, the same option makes a second request that also sends the visible captions of the buttons and links on that page, so CLEATUS can describe what the page is asking and name the control that moves you on. CLEATUS may only name a control the page is already showing, and the extension checks that against the page again before it shows you anything. Captions of radio buttons and checkboxes are never sent. The extension skips Representations and Certifications pages. You can turn either option off without affecting local fill and validation features.

A third request sends a page report only after you press “Send report”. The extension shows the redacted report before you send it. CLEATUS uses these reports to repair field and page identification.

The registration profile you enter is stored only on your own device. Ordinary fields, such as your business name and address, are saved in the browser's local extension storage so they persist between sessions. The sensitive fields, specifically your Taxpayer Identification Number, bank routing and account numbers, and MPIN, are held in session memory only. They are never written to disk and are erased when you close your browser. You can delete everything at any time using “Start over” in the extension's Settings screen.

CLEATUS receives optional online-assistance data. Vercel hosts the endpoint. Vercel KV, provided by Upstash, stores redacted cache entries. Microsoft Azure OpenAI processes page structure when an uncached field or page needs an AI answer. These parties process the data on our behalf and under our direction.

We use online-assistance data only to provide, operate, improve, and support this extension. We do not sell it, use it for advertising, or use it to determine creditworthiness or lending. We restrict access under the Chrome Web Store User Data Policy, including its Limited Use requirements.

CLEATUS caches field mappings for up to 30 days. It caches page identification and page descriptions for up to seven days. Unknown-page answers and descriptions CLEATUS could not produce expire after one day. User-submitted page reports expire after 90 days. Contact info@cleat.ai to request deletion of online-assistance data.

CLEATUS is a private company and is not affiliated with, endorsed by, or acting on behalf of the U.S. General Services Administration or any United States government agency. Registration on SAM.gov is free and always has been.

Third-Party Links

Our Website may contain links to external sites or services that are not operated by CLEATUS. We are not responsible for the content or privacy practices of these third-party sites, and we encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by posting a notice on our Website or sending you an email. Your continued use of the Website and Service after such changes will constitute your acknowledgment and acceptance of those changes.

Contact Us