Privacy Policy

What we do (context)

GoNoGo is a mobile-first tool that helps businesses discover, organize, and triage federal contracting opportunities and manage proposal workflows. We surface and enrich public opportunity data (e.g., from SAM.gov) and allow users to save, filter, and track items. We are not a law firm or accounting firm and do not provide legal advice.

Information we collect

A. Information you provide directly

Account & profile data: name, email, password (hashed), company, role, NAICS/certifications, preferences.
Beta/waitlist: email, role, company, interest tags, referral source.
Content you upload/submit: notes, saved opportunities, proposal artifacts/attachments, labels, custom fields, messages you send us.
Communications: support requests, survey responses, feedback, and call/meeting notes.
Payment data (for paid plans): billing name, email, and other details routed through our payment processor (e.g., Stripe). We do not store full payment card numbers.

B. Information collected automatically

Device & app data: device model, OS version, app version, language, time zone, screen size, mobile network/country.
Usage data: screens viewed, taps/clicks, session duration, features used, referral/UTM parameters, push notification tokens, crash logs, performance metrics.
Log data: IP address, timestamps, request IDs, diagnostic events, error traces.
Cookies & similar tech (web): strictly-necessary cookies for auth/session; optional analytics cookies where permitted by law.

C. Information from third parties

Public sources: we ingest public opportunity data (e.g., SAM.gov). Public data is not "your personal information," but your account actions related to that data (saves, notes, tags) are personal to you.
Integrations/partners (optional): if you connect an account or authorize an integration (e.g., calendar/email scheduling, file storage), we receive the data you authorize.
Service providers: analytics, crash reporting, email delivery, and payment processors send us limited information to operate the Services (e.g., delivery status, fraud checks).

D. Sensitive data

We do not intentionally collect sensitive data (e.g., health, precise geolocation, government IDs) and you should not upload it. If you believe sensitive data was uploaded inadvertently, contact us to request deletion.

E. Children's data

Our Services are for users 18+ and not directed to children.

How we use information

We use information to:

Provide and maintain the Services (authentication, sync, saved items, search, notifications).
Improve and develop features (analytics, A/B tests, bug fixes, usability).
Personalize content (recommendations, filters, default settings).
Communicate with you (product updates, waitlist/beta notices, transactional emails, security alerts).
Process payments and manage subscriptions.
Ensure security (fraud, abuse, rate limiting, incident investigation).
Comply with law (legal requests, regulatory obligations, tax and accounting).
Business operations (auditing, usage reporting, forecasting, due diligence if we explore a merger/acquisition).

Automated decision-making: We may rank or sort opportunities algorithmically. We do not make decisions with legal or similarly significant effects solely by automated means.

Legal bases (EEA/UK/Switzerland): consent (e.g., marketing cookies), contract (providing the app), legitimate interests (product improvement, security), and compliance with legal obligations.

Mobile-specific details

Push notifications: With your consent, we send alerts (saved searches, deadlines). You can revoke in the device settings.
OS permissions: We request only what's needed (e.g., notifications, file access for attachment uploads).
TestFlight/Android Beta: Apple/Google may collect additional diagnostics per their policies.

Analytics, cookies, and similar technologies

Strictly necessary cookies keep you logged in and secure.

Analytics/performance (where permitted): event metrics, crash logs, page performance. In regions requiring consent, we show a banner and only enable non-essential analytics after consent.

Your choices: You can opt out of non-essential cookies (where offered) and disable analytics in settings (if available) or use system-level "Limit Ad Tracking." Do Not Track (DNT) signals are not consistently honored due to industry limitations.

How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are defined by certain U.S. state laws.

We disclose information to:

Service providers / processors who help us operate the Services (e.g., hosting such as Supabase, email delivery such as Resend or similar, payments such as Stripe, analytics/crash reporting). They must follow our instructions and protect your data.
Legal, safety, and compliance: to comply with law, enforce our Terms, or protect rights, security, and property of GoNoGo, users, or the public.
Business transfers: in a merger, acquisition, financing, or sale of assets, your information may be transferred as permitted by law.
With your direction: if you connect third-party integrations or share content externally, we disclose as you instruct.
Aggregate/ de-identified data: we may publish usage trends that do not identify you.
Public-source data: Public opportunity data (e.g., SAM.gov) may be redistributed under its terms; your private account data and notes are not public unless you choose to share them.

Data retention

We keep information only as long as necessary for the purposes stated above, including:

active account lifecycle;
legal, accounting, or audit requirements;
backup/archival windows.

When no longer needed, we delete or de-identify data. You may request deletion of your account; some data may persist in backups for a limited period.

Security

We use reasonable administrative, technical, and organizational measures (e.g., encryption in transit, access controls, audit logs). No system is 100% secure; transmission is at your own risk. If we learn of a breach affecting you, we'll notify you and regulators as required by law.

International transfers

We process data primarily in the United States and may transfer to other locations where we or our providers operate. When transferring personal data from the EEA/UK/Switzerland, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and implement supplementary measures as needed.

Your rights & choices

A. General controls

Access, update, or delete certain information in Account settings.
Opt out of marketing emails via unsubscribe link (transactional emails may still be sent).
Control push notifications in device settings.
Manage cookies where a consent banner is offered.

B. EEA/UK/Switzerland

You may request: access, rectification, erasure, portability, restriction, or objection to processing (including profiling for personalization). You may withdraw consent at any time (it won't affect prior processing). You can lodge a complaint with your local supervisory authority.

C. U.S. State privacy rights (e.g., CA/VA/CO/CT/UT)

Depending on your state, you may have rights to access, delete, correct, and obtain a copy of your personal information, and to opt out of certain targeted advertising, profiling, or sales (we do not sell). If we deny a request, you can appeal by replying to our response.

To exercise rights, email support@gonogo-app.com with "Privacy Request" and include your account email and the region/state you reside in. We may verify your identity before fulfilling.

Authorized agents (CA): You or your agent may submit requests; we may require proof of authorization.

Data about others

If you upload or provide personal information about third parties (e.g., team members), you represent that you have the necessary rights and consent to do so and direct us to process it per this Policy.

Third-party links and services

Our Services may link to or embed third-party sites and tools. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy or security practices.

Account closure

You can request account deletion via in-app controls (if available) or by emailing support@gonogo-app.com. We may retain certain records as permitted by law and will delete remaining personal data within a reasonable period, subject to backups and legal holds.

Changes to this Policy

We may update this Policy from time to time. If changes are material, we'll notify you via email and/or in-app notice and update the Effective date above. Continued use of the Services after the effective date indicates acceptance of the updated Policy.

Contact us

Questions or requests about this Policy or your information:

Email: support@gonogo-app.com

Data controller: GoNoGo LLC (USA)

Governing law venue for privacy disputes: Michigan, USA (subject to any mandatory rights you have under local law).