Browsing collects nothing
Browsing the public catalog at /opportunities requires no account and collects nothing about you. RFPfit does not run analytics, advertising, or tracking scripts on any page — public or signed in — and does not track which opportunities you view unless you explicitly save one.
The only cookie RFPfit sets is a first-party session cookie used to keep you signed in. It is not used for tracking or advertising.
Sign-in without a password
RFPfit uses passwordless magic-link sign-in: you enter your email address, receive a one-time link, and click it to sign in. RFPfit never asks for or stores a password.
You can also sign in with Google if you prefer. In that case, Google shares your email address and basic profile information as part of the sign-in; no additional data from your Google account is accessed.
Procurement data is public information
The notices, award records, and vendor information in RFPfit come from official public-sector sources — government procurement portals and open-data feeds — published under open licences. This is public information, not personal information about RFPfit users.
See the pricing page and /sources pages for which sources RFPfit covers and the licences that apply.
Individual names in procurement records
Some procurement records include names of buyer-side contacts published in the original government source. RFPfit follows an internal policy to keep individual contact details — names, emails, phone numbers — out of what it displays or stores in normal use. RFPfit surfaces the buyer organization and the official notice, not named individuals.
This same principle applies to the AI brief and application checklist: the brief and checklist are validated to reject any personal contact details before they are stored or shown.
Your choices
From your Account page you can update your display name and organization name at any time. To access, correct, or delete the personal information RFPfit holds about you, or to close your account, contact RFPfit directly — self-serve account deletion is not built yet.