Privacy Notice

1. Information we handle

Account information includes your authentication identifier, verified email, name, and sign-in details managed by Clerk. Subscriber information includes company name, business description, selected trades/NAICS codes, regions, opportunity categories, time zone, email preference, and hidden-opportunity choices.

We store the Terms and Privacy Notice versions you affirmatively acknowledge, the server-recorded time, and the accepting account identifier. We do not use a browser-supplied time or infer acceptance from an existing subscription.

If you use workspace, document, or assistant features, we also process the projects, files, messages, and instructions you submit. Service providers and infrastructure may process connection information such as IP address, browser/device details, security logs, and request or delivery metadata. Do not submit sensitive or restricted information.

2. Purposes

We use information to authenticate accounts, save preferences, find and summarize opportunities, operate the features you request, deliver requested emails, honor opt-outs and deletion requests, troubleshoot failures, protect the service, and meet legal obligations.

Profile agreement, acknowledgment of this notice, daily-email permission, and cookie settings are distinct choices. Acknowledging this notice does not waive your rights or authorize unrelated marketing.

3. Service providers and disclosures

Information is shared with providers as needed for the functions below. Provider privacy notices explain their own practices. Provider retention and processing locations may differ from ours.

• Replit: application hosting, database and file storage, infrastructure/security operations, and routing of supported AI integration requests.
• Clerk: account registration, verified email, authentication, session security, and related device/session information. A social sign-in provider also receives information when you choose that sign-in method.
• Microsoft 365/Outlook: the destination email address, message content, and delivery/bounce metadata necessary to send requested emails and monitor failures.
• Google Gemini and OpenAI: business descriptions, opportunity content, and, when you use document/assistant features, the submitted text or files needed for those AI functions. Do not submit information you are not authorized to share with these processors.
• SAM.gov and public procurement sources, including BidnetDirect: search criteria and technical requests needed to retrieve public opportunity information. Following a source link takes you to that site and its own privacy practices.
• We may disclose information where required by law, to protect rights and security, or in a lawful business transfer subject to appropriate privacy protections. We do not sell profile data or share it for cross-context behavioral advertising through this service.

4. Cookies and browser storage

Essential authentication cookies and browser storage support sign-in, security, cookie-notice preferences, and requested application settings. Fonts are served with the app rather than requested from Google Fonts.

Optional service measurement is off by default in GovShark's event instrumentation. You may opt in separately in the Cookie Notice. When the hosting measurement service is available, the app may send limited events such as a sign-up click, successful profile save, or enabling daily emails. The app does not include your email, business description, account identifier, or personalized action tokens in event properties, and skips these events on query-string, hash, and personalized-link pages.

The hosting provider processes any enabled measurement under its own privacy notice and may process technical information needed to provide that service. Optional app events require a separate browser choice; essential-cookie acknowledgment, legal acceptance, and email permission do not authorize them. Global Privacy Control and Do Not Track suppress the optional app events.

You may withdraw the optional choice in the Cookie Notice. It expires after at most six months; clearing website data removes it. Rejecting or clearing essential sign-in cookies may prevent sign-in, but does not stop an existing email subscription. Use the pause or unsubscribe controls to stop emails.

5. Retention and deletion

We keep profile information while your profile exists and as needed to provide requested features. Deleting a subscriber profile removes that profile and its private hidden-opportunity records. It does not automatically delete your Clerk account, other workspace data, received emails, infrastructure backups, or provider-held logs and mailbox records.

Delivery, security, fraud-prevention, and legal records may be retained for legitimate operational or legal purposes. Backup copies may persist until normal replacement. Contact us for an account-wide deletion request or details about retained records; we will verify identity and respond as required by applicable law.

6. Your choices and requests

You may update profile information, pause/resume requested emails, confirm unsubscribe from an email, and delete your subscriber profile in the app. You may ask us for access, correction, a copy of your data, or deletion by emailing the contact below. We may need to verify account ownership and may retain information where law permits or requires it.

Depending on your location and applicable law, you may have additional rights, including an appeal or complaint to a regulator. We will not unlawfully discriminate against you for exercising privacy rights. We do not use app-added optional tracking for targeted advertising; an essential-cookie notice acknowledgment is not consent to such tracking.

7. Security, location, and children

We use access controls and other reasonable safeguards, but no system is completely secure. Do not send credentials or restricted information through profile descriptions or assistant prompts. Our providers may process data in the United States or other locations under their applicable terms; we do not promise that all data remains in New Mexico or the United States.

The service is intended for adults aged 18 or older representing U.S. businesses, not children. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.

8. Updates and contact

We identify notice updates by version. Material changes will be presented for acknowledgment before the next profile save. If a new purpose requires separate permission under applicable law, a notice acknowledgment alone is not that permission.

Questions or requests: sharky@sharkystrategies.com. Operator: SHARKY STRATEGIES LLC, New Mexico, United States.