Privacy Policy

1. Overview

This Privacy Policy describes how Persons and Son, Inc. ("we," "our," "Company") collects, uses, stores, and protects information entered into the RFP Intelligence Platform ("Platform") by authorized users. This Platform is an internal business tool — it is not a consumer-facing service and is not intended for use by the general public.

2. Information We Collect

When you use the Platform, we may collect:

• Account information: name, email address, role, and login activity;
• Bid and RFP data: uploaded documents, project details, draft content, pricing data, and notes;
• AI interaction data: messages sent to and received from the AI assistant;
• Usage data: pages visited, actions taken, and timestamps;
• Site photos and media uploaded through the Platform.

3. How We Use Your Information

Information collected through the Platform is used solely to:

• Provide and operate the Platform for internal bid management;
• Generate AI-assisted content using your inputs and uploaded documents;
• Authenticate users and maintain security;
• Send system notifications such as password resets and account invitations;
• Improve the Platform's functionality and performance.

We do not sell, rent, or share your information with third parties for marketing purposes.

4. Third-Party Services

The Platform uses the following third-party services to operate:

• Anthropic (Claude AI): Messages and document content you submit to the AI assistant are processed by Anthropic's API. Anthropic's privacy policy governs their handling of this data. We do not submit personally identifiable information to Anthropic beyond what is necessary for bid assistance.
• Resend: Used to deliver transactional emails (invitations, password resets). Email addresses are shared only as necessary to deliver messages.
• SAM.gov: Federal procurement opportunity data is retrieved from the SAM.gov public API. No user data is transmitted to SAM.gov.

5. Data Storage and Security

All Platform data is stored on servers controlled by or contracted by Persons and Son, Inc. We implement reasonable technical and organizational measures to protect against unauthorized access, including:

• Encrypted passwords (bcrypt);
• Session-based authentication with expiration;
• Role-based access controls;
• HTTPS encryption in transit.

No security system is impenetrable. In the event of a data breach affecting user information, affected users will be notified as required by applicable law.

6. Data Retention

We retain account and bid data for as long as necessary to support business operations and comply with legal obligations. Archived user accounts are retained in our database but access is revoked. You may request deletion of your account data by contacting your system administrator.

7. Your Rights

As an authorized user, you may request:

• Access to personal information we hold about you;
• Correction of inaccurate information;
• Deletion of your account and associated data, subject to operational and legal requirements.

Requests should be directed to your system administrator or to the contact below.

8. Cookies and Sessions

The Platform uses session cookies solely to maintain your authenticated login state. These cookies do not track you across other websites and are deleted upon sign-out or expiration.

9. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

10. Contact

Privacy questions or requests may be directed to:
Persons and Son, Inc.
98 County Road 321, Poplar Bluff, MO
tpersons@personsandsoninc.com
573-686-4142