Privacy policy

Last updated: October 28, 2026

RFPME ("we") is run by devPHASE LLC. This policy explains what we collect when you use rfpme.app and our emails, why, and who helps us process it. We don't sell your information or use analytics trackers. We do use Google's ads tag to measure whether our ads work (see Cookies).

What we collect

• Your quiz answers: the services you offer, contract sizes, home state and remote preference, certifications, and what you write about your business and what you don't want. These are what we match RFPs against.
• Your email address, and any other addresses you ask us to send digests to. Each address confirms before we email it, and every digest has a one-click unsubscribe.
• Your account and sign-in: your email address, and your Google account's name and email if you sign in with Google. We don't use passwords.
• Billing: handled by Stripe, which holds your card and billing details. We never see or store your full card number. We keep your Stripe customer ID, your subscription status and when your free trial ends.
• Referrals: who referred you (from their link, code or email), and whether your first payment went through, so we can credit them. A referrer sees only how many people signed up and the months they earned, never who. To catch self-referrals, we compare the card fingerprints Stripe gives us; we never see the card numbers.
• What you were sent: the RFPs matched to you, their fit scores, and when each digest went out, so we don't send the same RFP twice and can tell you when one changes.
• A one-way hash of your IP address when you start the quiz or use "Write it from my website", used only to limit how often one network can do either. We don't store the address itself, and delete the website requests' hashes after 7 days.
• Your website, only if you ask us to draft your description from it: we read a few of its public pages once, send their text to Anthropic to write the draft, and show it to you. We don't keep the address or the pages; the description is saved only if you continue with it.
• RFPs you email us: your email address and message, so we can add the RFP and reply. The RFP itself, read from the buyer's public page, is shown to subscribers it fits; your name and address are not.

Cookies

Before you sign in, rfpme_draft keeps your quiz answers linked to your browser for 30 days. While you sign in with a code, rfpme_signin_email remembers which address we sent it to, for an hour. Signing in sets session cookies (named sb-…) that keep you signed in on that device for up to 90 days, until you sign out. If you arrive through a subscriber's referral link, rfpme_ref remembers their referral code for 30 days, so they get credit if you subscribe. Checkout happens on Stripe's own pages, which set Stripe's cookies there for payments and fraud prevention.

Advertising: our pages load Google's ads tag (Google Ads). It sets Google advertising cookies (such as _gcl_au) so we can tell when someone who clicked one of our ads visits or starts a trial, and so Google can show our ads to people who've visited. If your browser sends a Global Privacy Control signal, we tell Google not to store ad cookies or use your visit for ads. We use no analytics cookies.

How we use it

• To find RFPs that fit your business, score the fit, and email you a daily digest.
• To show you RFPs that fit before you sign up, and to remember your answers while you finish the quiz.
• To run your account and your subscription.
• To keep the service working: preventing abuse, fixing problems, and understanding which industries people want covered.
• To choose sponsored content for your emails, if we include any: it may be matched to your industries, without sharing who you are. We never sell or give your personal information to sponsors or advertisers.

Who processes it for us

We use these providers to run RFPME. Each processes your information only to provide its service to us.

• Supabase: our database, where your answers, addresses and matches are stored.
• Vercel: hosts the website.
• Inngest: runs our daily matching and email jobs.
• Anthropic: its Claude AI reads your business description, exclusions and settings alongside each RFP to score the fit and explain it, and, if you ask, your website's public pages to draft your description.
• Resend: sends our emails.
• Google: if you choose to sign in with Google, and Google Ads, which receives the pages you visit on our site and whether you started a trial, to measure and show our ads.
• Stripe: checkout, payments and your subscription.

How long we keep it

Unfinished quiz answers are deleted 90 days after you last changed them. While you subscribe, we keep your profile and addresses, and your digest history (which RFPs we sent you, and when) for 180 days, or until the RFP closes if it's still open then, so we never send you the same one twice. RFPs you favorite stay while you subscribe; ones you delete leave your account but keep a hidden marker so we don't send them again. When your account is closed, we delete its data within 30 days, except billing records we must keep by law.

Your choices

• Change your answers at any time; your matches are rescored the next morning.
• Unsubscribe any address from the link at the bottom of every digest.
• Turn on Global Privacy Control in your browser, or block third-party cookies, to keep your visits out of our Google ads.
• Ask us for a copy of your information, or to delete it, at hello@rfpme.app.

Children

RFPME is a service for businesses and isn't meant for anyone under 18.

Changes

If we change this policy in a way that matters, we'll update the date above and tell subscribers by email.

Contact

Questions about your privacy: hello@rfpme.app.