Privacy policy
Last updated: October 27, 2026
RFPME ("we") is run by devPHASE LLC. This policy explains what we collect when you use rfpme.io and our emails, why, and who helps us process it. We don't sell your information, and we don't use advertising or analytics trackers.
What we collect
- Your quiz answers: the services you offer, contract sizes, home state and remote preference, certifications, and what you write about your business and what you don't want. These are what we match RFPs against.
- Your email address, and any other addresses you ask us to send digests to. Each address confirms before we email it, and every digest has a one-click unsubscribe.
- Your account and sign-in: your email address, and your Google account's name and email if you sign in with Google. We don't use passwords.
- Billing: handled by Stripe, which holds your card and billing details. We never see or store your full card number. We keep your Stripe customer ID, your subscription status and when your free trial ends.
- Referrals: who referred you (from their link, code or email), and whether your first payment went through, so we can credit them. A referrer sees only how many people signed up and the months they earned, never who. To catch self-referrals, we compare the card fingerprints Stripe gives us; we never see the card numbers.
- What you were sent: the RFPs matched to you, their fit scores, and when each digest went out, so we don't send the same RFP twice and can tell you when one changes.
- A one-way hash of your IP address when you start the quiz or use "Write it from my website", used only to limit how often one network can do either. We don't store the address itself, and delete the website requests' hashes after 7 days.
- Your website, only if you ask us to draft your description from it: we read a few of its public pages once, send their text to Anthropic to write the draft, and show it to you. We don't keep the address or the pages; the description is saved only if you continue with it.
Cookies
Before you sign in, rfpme_draft keeps your quiz answers linked to your browser for 30 days. While you sign in with a code, rfpme_signin_email remembers which address we sent it to, for an hour. Signing in sets session cookies (named sb-…) that keep you signed in on that device for up to 90 days, until you sign out. If you arrive through a subscriber's referral link, rfpme_ref remembers their referral code for 30 days, so they get credit if you subscribe. We use no advertising, analytics or tracking cookies. Checkout happens on Stripe's own pages, which set Stripe's cookies there for payments and fraud prevention.
How we use it
- To find RFPs that fit your business, score the fit, and email you a daily digest.
- To show you RFPs that fit before you sign up, and to remember your answers while you finish the quiz.
- To run your account and your subscription.
- To keep the service working: preventing abuse, fixing problems, and understanding which industries people want covered.
- To choose sponsored content for your emails, if we include any: it may be matched to your industries, without sharing who you are. We never sell or give your personal information to sponsors or advertisers.
Who processes it for us
We use these providers to run RFPME. Each processes your information only to provide its service to us.
- Supabase: our database, where your answers, addresses and matches are stored.
- Vercel: hosts the website.
- Inngest: runs our daily matching and email jobs.
- Anthropic: its Claude AI reads your business description, exclusions and settings alongside each RFP to score the fit and explain it, and, if you ask, your website's public pages to draft your description.
- Resend: sends our emails.
- Google: if you choose to sign in with Google.
- Stripe: checkout, payments and your subscription.
How long we keep it
Unfinished quiz answers are deleted 90 days after you last changed them. While you subscribe, we keep your profile and addresses, and your digest history (which RFPs we sent you, and when) for 180 days, or until the RFP closes if it's still open then, so we never send you the same one twice. RFPs you favorite stay while you subscribe; ones you delete leave your account but keep a hidden marker so we don't send them again. When your account is closed, we delete its data within 30 days, except billing records we must keep by law.
Your choices
- Change your answers at any time; your matches are rescored the next morning.
- Unsubscribe any address from the link at the bottom of every digest.
- Ask us for a copy of your information, or to delete it, at hello@rfpme.io.
Children
RFPME is a service for businesses and isn't meant for anyone under 18.
Changes
If we change this policy in a way that matters, we'll update the date above and tell subscribers by email.
Contact
Questions about your privacy: hello@rfpme.io.