Privacy Policy

Privacy Policy

GovPeak is a federal business development and capture management service operated by Gov-Peak, LLC. This policy explains how GovPeak handles information when you visit the website, use a GovPeak workspace, contact support, or connect an external service such as an AI assistant or calendar provider.

Information GovPeak handles

Depending on the features you use, GovPeak may process:

• Account and workspace information, including name, work email, company, role, and account status.
• Business development data you or your organization enter, import, or create, such as pursuits, opportunity notes, action items, contacts, teaming information, company profile information, and meeting notes.
• Public federal procurement and spending information obtained from government sources and other public sources used by GovPeak.
• Connected-service information when you choose to connect a service. This may include OAuth tokens, connection status, calendar data, completed meeting transcripts, or assistant tool requests needed to provide the feature you enabled.
• Usage, diagnostic, audit, and security information used to operate, troubleshoot, and protect the service.
• Billing-related identifiers and subscription status. Payment card details are handled by GovPeak's payment processor rather than stored as card data in GovPeak.
• Information you provide in support requests.

How GovPeak uses information

GovPeak uses information to:

• provide and maintain the service;
• authenticate users and enforce workspace permissions;
• search, organize, analyze, and present federal business development information;
• carry out actions a user requests, including permitted actions through connected services;
• provide support, billing, security, audit, and abuse-prevention functions;
• improve reliability and product functionality; and
• comply with applicable legal obligations and enforce agreements.

AI assistant connections

GovPeak supports connections to compatible AI assistants through OAuth. A connection is read-only by default. If a user explicitly chooses Read & write access, the assistant may create or update the limited GovPeak records exposed by the connection, such as pursuits, pursuit notes, and action items. GovPeak does not expose deletion through this connection.

The assistant receives only the GovPeak data returned by the tools it calls under the connected user's permissions. GovPeak receives the assistant's tool requests and the information necessary to execute them. GovPeak does not receive or store the user's ChatGPT or other assistant account password.

Users can disconnect an assistant connection from GovPeak. Account or workspace restrictions are re-checked when the connection is used.

AI-Assisted Meeting Analysis

AI-Assisted Meeting Analysis is optional and controlled by your organization. It is off by default and is used for a company's workspace only after an administrator of that company turns it on. An administrator can turn it off again at any time.

When it is enabled and used, GovPeak sends the meeting transcript, the meeting date, and only the pursuit and team context needed for the analysis (that company's pursuit names, agencies, pipeline stages, and solicitation numbers, and the names of its team members) to Amazon Bedrock, a service of Amazon Web Services, where an Anthropic Claude model generates suggested actions, decisions, risks, dates, and pursuit updates.

Processing uses a United States Amazon Bedrock inference profile, so a request may be processed in more than one AWS Region within the United States rather than in a single fixed Region.

AI-generated suggestions are presented for review and are not automatically applied to the pipeline. When AI-Assisted Meeting Analysis is disabled, transcript content is not sent to Amazon Bedrock through this feature. A transcript that GovPeak's safety check flags for a restricted or sensitive marking is not sent to Amazon Bedrock through this feature.

AI-assisted semantic search

Opportunity Search can also find public notices by meaning, not only by their exact words. This feature is in beta and GovPeak turns it on per workspace; it is currently on for invited beta workspaces.

When it is on and you type a search, GovPeak sends the text of that search (lower-cased, with extra spaces and surrounding punctuation removed) to Amazon Bedrock, a service of Amazon Web Services, in a United States AWS Region. There, an Amazon Titan text-embeddings model turns it into a numeric representation, which GovPeak compares with representations of public notices. Only the search text is sent, not your company profile, pipeline, Company Fit, notes or other workspace records. Searches that GovPeak recognizes as a solicitation or notice number, and the Suggested feed when no search text is typed, do not use this feature.

GovPeak keeps a recent search's numeric representation briefly in server memory so a repeated search is fast. It is not written to GovPeak's database, and GovPeak does not use search text to train any model. Public notice text from government sources is processed through the same service to build the search index. If the service is unavailable, search continues with keyword matching.

Do not type classified information, or information you are not permitted to share with a cloud service provider, into a search.

Service providers and connected services

GovPeak may use service providers for infrastructure, authentication, payment processing, email delivery, and other functions needed to operate the service. When you intentionally connect a third-party service, information necessary for that integration is exchanged with that provider at your direction and is also subject to that provider's terms and privacy practices.

GovPeak does not disclose customer workspace data to unrelated third parties for their independent advertising purposes.

Data isolation and security

GovPeak uses technical and organizational safeguards intended to protect customer information, including tenant-scoped access controls, authentication, encryption for protected credentials, audit logging, and permission checks. No system can guarantee absolute security.

You are responsible for protecting your sign-in credentials and for granting integration permissions only to services and people you trust.

Retention

GovPeak retains account and workspace information for as long as reasonably needed to provide the service, maintain security and audit records, resolve disputes, comply with legal obligations, and support legitimate business operations. Backup or security copies may remain for a limited period after information is removed from the active service.

Support tickets placed in the Deleted state are scheduled for permanent deletion after 30 days. Other retention periods may vary by record type and contractual requirements.

Customer control

Organizations and authorized users can update many workspace records directly in GovPeak. Requests concerning account access, correction, export, or deletion can be submitted through the Support page. Some records may be retained when required for security, legal, billing, or contractual purposes.

Children

GovPeak is a business service and is not directed to children under 18.

Changes to this policy

Gov-Peak, LLC may update this policy as the service changes. The effective date at the top of this page identifies the current version.

Contact

Questions about privacy or data handling can be submitted through the GovPeak Support page.