Privacy Policy

This policy describes how SBIR Signal collects, uses, and shares information when you use sbirsignal.com. It covers accounts, payments, file uploads, and sign-in. Last updated August 17, 2026.

Who we are

SBIR Signal operates sbirsignal.com. The public SBIR/STTR award records on the site come from U.S. government datasets (including USASpending.gov and SBIR.gov) and are not personal data we collected from you.

Information we collect

• Account. Email address, name, and a hashed password if you create an account. We do not store plaintext passwords.
• Sign-in providers. If you use Google (or another supported SSO provider), we receive the identifier and profile fields that provider shares for sign-in (typically email and name).
• Payments. Paid plans are billed by Stripe. We store the Stripe customer/subscription identifiers needed to manage your plan. We do not store full card numbers; Stripe processes card data on their pages.
• File uploads. Capability statements and similar files you upload to run a match or scorecard are stored so we can generate results and, if you save them, reuse them on later visits.
• Usage. Server logs (IP, user-agent, path) and, when configured, analytics events (for example Google Analytics) to keep the product working and understand which pages are useful.
• Cookies. A signed session cookie for sign-in, plus a separate signed cookie for anonymous product state (for example whether you dismissed the registration prompt). Theme preference may be stored in local storage on your device.

How we use information

We use account and upload data to provide the product you asked for: search, saved alerts, match reports, scorecards, billing, and support. We use aggregated usage data to operate, secure, and improve SBIR Signal. We do not sell your personal information.

Who we share it with

• Stripe — payment processing for paid plans.
• Google — optional sign-in, and analytics if enabled on the site.
• Hosting / email infrastructure — to run the application and send transactional mail (for example password reset or alert emails you requested).

We may also disclose information if required by law or to protect the security of the service.

Retention

We keep account, billing identifiers, and saved uploads while your account is active and for a reasonable period afterward so we can restore access or meet legal/accounting needs. You can request deletion of your account and uploaded files by contacting us.

Your choices

You can use much of the public award database without an account. Creating an account is optional. You can close the registration prompt and keep browsing. You may request access or deletion of account data by emailing us from the address on the account.

Contact

Questions about this policy or data-deletion requests: email sbirsignal@gmail.com or see About SBIR Signal. Related: Security & Data Handling · Terms of Use.