01
Who We Are
- Anchors Gp LLC is a limited liability company operating the GovKarma federal procurement intelligence platform at govkarma.com ("GovKarma," "we," "our," or "us").
- This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform, and describes your rights with respect to that information.
- For questions about this policy, contact us at privacy@govkarma.com.
02
Information We Collect
- Account and identity information: name and business email address.
- Business profile data you enter: company name, CAGE code, SAM UEI, NAICS codes, certifications (8(a), SDVOSB, WOSB, HUBZone), geographic service areas, employee count, and SAM registration status.
- Usage and activity data: pages visited, features used, search queries, session timestamps, IP address, browser type, device type, and referral source — collected automatically.
- Pipeline and business development data you create: opportunities tracked, contacts added, notes, pipeline stages, and past performance records.
- Uploaded files and documents: capability statements, past performance records, contract documents, RFP responses, certifications, and company logos. These files are stored securely and processed solely to provide GovKarma features to you. They are not used to train, fine-tune, or benchmark public or third-party AI models, and they are not shared with other users or customers.
- Communications: emails or messages you send us, including support inquiries and feedback.
- Payment information: billing details are handled by our payment processor. We do not store full credit card numbers.
- Waitlist entries: email addresses submitted on our waitlist form.
03
How We Use Your Information
- To create and manage your account and provide access to the GovKarma platform.
- To match your business profile against federal solicitations, grant opportunities, and expiring contract alerts.
- To calculate and display your GovKarma readiness score and procurement analytics.
- To power AI features including opportunity matching, compliance analysis, and AI-generated recommendations using your business profile data, NAICS codes, certifications, and past performance records.
- To send transactional communications: account confirmations, security alerts, opportunity digest emails, and billing notifications.
- To send marketing communications about platform updates or new features, where you have given consent or where permitted by applicable law. You may opt out at any time.
- To analyze aggregate, anonymized usage patterns to improve platform performance and user experience.
- To enforce our Terms of Service, detect fraud, and maintain platform security.
- To comply with applicable laws and respond to lawful requests from government authorities.
- We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
04
AI Processing
- GovKarma uses artificial intelligence and machine learning systems to deliver core platform features, including opportunity matching, readiness scoring, compliance analysis, and AI-generated recommendations. To operate these features, your business profile data (NAICS codes, certifications, past performance records, SAM registration details), usage patterns, and search queries may be processed by AI systems operated by us or our trusted service providers.
- We do not use your private data, uploaded files, business profile information, pipeline records, or contact data to train, fine-tune, or benchmark any publicly available AI model or any AI model made available to third parties.
- Aggregated, anonymized, and de-identified platform data that cannot reasonably be linked back to you may be used to improve GovKarma's internal AI systems and overall platform accuracy.
- AI-generated outputs — including opportunity matches, readiness scores, compliance matrices, and proposal drafts — are for informational purposes only and may be inaccurate or incomplete. See our Terms of Service for the full AI output disclaimer.
05
Legal Basis for Processing
- If you are located in the EEA, UK, or Switzerland, we process your personal data on the following legal bases:
- Contract performance: processing necessary to provide the GovKarma platform under our Terms of Service.
- Legitimate interests: fraud prevention, platform security, improving our service, and sending direct marketing to existing customers, where our interests are not overridden by your rights.
- Consent: for optional marketing communications and non-essential cookies. You may withdraw consent at any time.
- Legal obligation: processing required to comply with applicable law.
06
Data Sharing and Third Parties
- We use trusted third-party service providers (subprocessors) to operate the platform, including for authentication, database hosting, file storage, AI processing, email delivery, analytics, and payment processing. All subprocessors are contractually required to handle your data securely and use it only to provide services to us. A current list of subprocessors is available upon request at privacy@govkarma.com.
- Government data sources (SAM.gov, USASpending.gov, Grants.gov): publicly available federal databases we query to populate platform content. No personal data is sent to these sources. Your registered business information — such as CAGE code, UEI, NAICS codes, and certifications — may appear in these public databases independently of GovKarma.
- If we use non-essential analytics tools, we will request your consent before setting non-essential cookies.
- Legal and compliance: we may disclose your information to law enforcement or regulatory authorities when required by law, court order, or to protect the rights and safety of GovKarma or its users.
- Business transfers: if GovKarma is acquired or merges, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.
07
Organization Accounts
- If you access GovKarma through a workspace created or administered by your employer or another organization, that organization's administrator(s) may have access to your account activity, pipeline data, uploaded files, and other workspace content.
- Anchors Gp LLC is not responsible for an organization's internal data practices or decisions made by workspace administrators.
- If you leave an organization, your access to the workspace and its data may be revoked by the administrator.
- Personal data you entered outside the organization workspace is governed solely by this Privacy Policy.
08
International Data Transfers
- GovKarma is based in the United States. If you access our platform from outside the US, your information will be transferred to and processed in the United States.
- For transfers from the EEA, UK, or Switzerland to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms where required.
09
Data Retention
- Active account data is retained for the duration of your subscription.
- Following account cancellation or termination, we retain your data for 30 days to allow for export, after which it is deleted from active systems.
- Uploaded files and documents are deleted from our systems within 30 days of account termination or upon your request, whichever is earlier. You may delete individual files at any time through your account settings.
- Some data may be retained longer where required by law (e.g., financial records for tax purposes, typically 7 years).
- Waitlist email addresses are retained until you opt out or request removal.
- Anonymized and aggregated usage data may be retained indefinitely for analytics and product improvement.
10
Security
- We implement industry-standard technical and organizational measures to protect your information, including encryption at rest and in transit, access controls, and regular security reviews.
- Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
- In the event of a security incident involving your personal data, we will notify affected users in accordance with applicable law. Where required, we will also notify relevant regulatory authorities within the legally mandated timeframe. Notification timelines depend on the nature of the incident, the data involved, and jurisdictional requirements.
- You are responsible for maintaining the confidentiality of your account credentials.
11
Your Privacy Rights
- Access: request a copy of all personal data we hold about you.
- Correction: update inaccurate or incomplete information through account settings or by contacting us.
- Deletion: request erasure of your account and personal data. We may retain certain data where required by law.
- Portability: export your pipeline, contacts, past performance records, and uploaded files through the platform where this feature is available.
- Restriction: request that we restrict processing of your personal data in certain circumstances.
- Objection: object to processing based on legitimate interests or for direct marketing at any time.
- Opt-out of marketing: unsubscribe via the link in any email or by contacting privacy@govkarma.com.
- To exercise any of these rights, contact privacy@govkarma.com. We will respond within 30 days.
12
California Privacy Rights (CCPA / CPRA)
- If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom it was shared, covering the past 12 months.
- Right to Delete: request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: GovKarma does not sell or share personal information for cross-context behavioral advertising.
- Non-Discrimination: we will not discriminate against you for exercising your California privacy rights.
- To submit a California privacy request, contact privacy@govkarma.com with "CCPA Request" in the subject line. We will respond within 45 days.
13
EEA and UK Rights (GDPR)
- If you are located in the EEA or UK, you have the right to: access your personal data, rectify inaccurate data, erase your data, restrict or object to processing, and lodge a complaint with your local supervisory authority.
- You have the right to data portability: to receive your personal data in a structured, machine-readable format.
- To exercise these rights, contact privacy@govkarma.com. We will respond within 30 days.
14
Children's Privacy
- GovKarma is intended for use by businesses and professionals aged 18 and older. We do not knowingly collect personal information from children under 13.
- If you believe we have inadvertently collected information from a child, contact privacy@govkarma.com immediately.
16
Changes to This Policy
- We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-app notice before they take effect.
- Your continued use of GovKarma after the effective date of changes constitutes acceptance of the updated policy.
17
Contact
- Anchors Gp LLC (operating as GovKarma).
- Privacy inquiries: privacy@govkarma.com
- Security inquiries: security@govkarma.com
- General support: hello@govkarma.com
- We respond to all privacy requests within 30 days.
These documents were last updated on May 23, 2026. For questions contact legal@govkarma.com. GovKarma is a product of Anchors Gp LLC.