Privacy notice

Public research and browser tools

Project information is collected from public government sources. The public bid center does not require an account. Browser watchlists, project profiles, briefing preferences and local follow-up notes use local storage on your device. Clearing browser data removes those local copies. Government-source links and the live dataset loader contact their respective websites, which apply their own privacy practices.

Company accounts

When company sign-in is available, we use your business email to authenticate you and store your company name, membership, interests, shared watchlist, notes and notification choices. Your company’s members can see shared workspace information. The company owner can manage colleagues. Access tokens use secure, HttpOnly cookies; passwords are not stored by CleanupSignal.

Service providers

Cloudflare hosts the website and company data. The account integration uses Supabase for email authentication when connected. Optional Stripe billing and Resend email delivery remain unavailable until configured. When enabled, those providers process the information needed for payments or delivery. Payment-card details are entered on Stripe’s hosted checkout and are not stored in CleanupSignal’s database. Infrastructure providers may process request metadata and security logs.

Email preferences

Bid digests and reminders require your own opt-in. Turn them off in your account or use an email’s unsubscribe link. Operational sign-in emails are separate from bid alerts. We do not sell your private company notes or business email addresses.

Support requests

The support form prepares a draft in your email app or a downloadable text file. It does not submit a ticket or upload your message to CleanupSignal automatically. If you choose to send the email, your email provider and our support mailbox process it. We use it to investigate and respond to your request.

Requests and retention

Contact support from your account email to request access, correction or deletion of your account information. We will verify the request before acting. Shared company records may need to remain available to the company; ask your owner before putting personal or confidential third-party information in shared notes. Billing-provider records may be subject to separate retention requirements. Backups and provider logs may persist after active records are removed.

Availability

The workspace page shows which account, payment and email features are currently available. This notice describes the information used by those features; it does not mean subscriptions or email delivery are active.

Online support requests

If you submit the online support form, CleanupSignal stores your contact email, request category, project reference and description privately in its Cloudflare database. These are visible to the operator, are not published in GitHub, and are used to investigate and reply to your request. A salted, hourly IP hash limits abuse; raw IP addresses are not stored in the support database. Up to five submissions per IP per hour and 200 site-wide per day are accepted. Open requests are removed after 90 days; resolved requests after 30 days, by scheduled maintenance. Provider backup retention is separate. Email correspondence remains in the support mailbox until handled under the operator’s mailbox process. Do not submit credentials or sensitive third-party information.

Email delivery events

When subscriber delivery is activated, signed provider events record delivery outcomes. Bounces and spam complaints suppress further delivery. Suppression records store a hash of the recipient address and the reason, rather than copying the address into public monitoring.