Privacy Policy: GRIT GovResellerReady™

1. Information We Collect

Account information you provide directly:

• Name, email address, and password
• Business information (business name, entity type, location, EIN/W-9 status, resale certificate status, SAM/UEI status, certifications)
• Financial readiness information you choose to enter (available cash, credit terms, maximum comfortable order size). See Section 6 for what we deliberately do not collect

Content you create or upload:

• Opportunity/solicitation documents you upload
• Supplier records, contacts, and communication notes you create
• Quotes, tasks, and profit calculations you enter
• Conversations with Scout, our AI coach

Automatically collected information:

• Usage and event logs (pages visited, features used, timestamps)
• Device and browser information
• IP address (used for fraud prevention and evidence records, see our Refund & Cancellation Policy)

Payment information:

• We do not store your full card number. Payment is processed by Stripe, and we retain only transaction references (amount, date, order ID, Stripe identifiers) needed for billing and our chargeback evidence records.

2. How We Use Your Information

We use your information to:

• Operate the Service (build your opportunity case files, run Scout's analysis, generate readiness reports)
• Process payments and maintain billing records
• Send transactional email (receipts, account notifications, security alerts) via Resend
• Send product updates, coaching content, and marketing communications via GoHighLevel, if you haven't opted out
• Detect and prevent fraud, abuse, and security incidents
• Improve the Service, including reviewing anonymized, evidence-backed patterns for our shared knowledge base (see Section 4)

3. How We Share Your Information

We do not sell your personal information. We share information only with:

• Stripe for payment processing
• Resend for transactional email delivery
• GoHighLevel for marketing and CRM (only lifecycle events and tags, such as "Challenge completed" or "coupon issued", never your solicitation files, supplier quotes, funding documents, or agency information)
• Service providers who help us operate the Service (hosting, database, security), bound by confidentiality obligations
• Law enforcement or regulators, only when required by law

4. Shared Knowledge and Scout

Scout has three layers of memory:

• Your private data, meaning your company profile, opportunities, suppliers, and history, visible only to you and to support staff assisting your account
• Your opportunity case files, visible only to you
• Shared learning, where only anonymous, reviewed patterns with your identifying information removed are ever promoted to the knowledge base Scout draws on for other users

Your specific business information, documents, and identity are never shared with other users or added to shared knowledge without being anonymized and reviewed first.

5. Public Success Stories

Any public sharing of your success (for example, in marketing) requires your separate, explicit, opt-in permission. This permission defaults to off and is never assumed from your use of the Service.

6. What We Deliberately Do Not Collect

We do not collect or ask you to enter: Social Security numbers, full payment card numbers, bank account passwords, unredacted credit reports, or lender login credentials. Where the Service references external financing or credit applications, those applications happen directly on the provider's own secure website, not inside GRIT GovResellerReady.

7. Data Retention

We retain your account and content data for as long as your account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes (including the chargeback evidence records described in our Refund & Cancellation Policy). You can request deletion at any time. See Section 9.

8. Security

We use row-level security so that your data is isolated from other users' accounts at the database level, not just in the app's interface. Sensitive documents are stored in private storage with time-limited access. Administrator access to private records is logged. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted over the internet.

9. Your Choices and Rights

You can:

• Export your data from Settings at any time
• Request deletion of your account and associated data by contacting us (subject to records we're required to retain for legal or billing purposes)
• Opt out of marketing email at any time via the unsubscribe link in any marketing message. This does not affect transactional email (like receipts) necessary to operate your account
• Update or correct your profile and business information directly in Settings

10. Children's Privacy

The Service is intended for business use by adults age 18 and older. We do not knowingly collect information from anyone under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will provide reasonable notice before it takes effect.

12. Contact

Questions about this policy, or requests to access, export, or delete your data, can be sent to: support@in.drmelissajwilliams.com