Privacy Policy

C2MT AI, Inc. (“C2MT AI,” “we,” “us”) provides an AI-powered platform that helps small business government and commercial contractors discover, evaluate, and respond to government and commercial opportunities. This policy explains what information we collect through c2mtai.cloud and our related services (the “Service”), how we use it, and the choices you have.

• Account information: name, email address, and authentication data, processed on our behalf by our authentication provider (Clerk) when you sign up or sign in, including via Google sign-in.
• Company and proposal data: information you enter or upload about your business (e.g. UEI, CAGE code, NAICS codes, certifications, capability statements) and the solicitation documents and proposal content you create or upload while using the Service.
• Billing information: subscription and payment details, processed on our behalf by Stripe. Card details are entered on Stripe's hosted checkout page; we never see or store your full payment card number.
• Usage data: server logs and records of how features are used (for example, how many proposals or AI generations an organization has run), used to operate plan limits and to maintain and improve the Service.

We use the information above to:

• Provide, operate, and maintain the Service, including matching your company against opportunities published on SAM.gov and generating AI-assisted proposal content from the documents and information you provide.
• Authenticate your account and secure access to your organization's data.
• Process subscription payments and manage billing.
• Communicate with you about your account, updates, and support requests.
• Monitor, debug, and improve the reliability and security of the Service.

AI features such as match scoring, bid recommendations, and proposal drafting run on Amazon Bedrock, inside Amazon Web Services. Your company information, documents, and proposal content are sent to the AI model only to produce the output you asked for.

We do not use your content to train AI models, and AWS does not use content sent through Amazon Bedrock to train its models.

We do not sell your personal information. We share information only with the service providers that power the Service on our behalf, each bound by their own privacy and security commitments:

• Clerk (authentication and account management)
• Stripe (payment processing)
• Amazon Web Services (application hosting, file storage, and AI processing)
• MongoDB Atlas (database hosting)
• Vercel (website hosting)

Opportunity data comes from SAM.gov, the public federal contracting source. We query it; we do not send it your personal information. We may also disclose information if required by law or to protect the rights, property, or safety of C2MT AI, Inc., our users, or others.

We use only the cookies needed to keep you signed in, set by our authentication provider, Clerk. Your browser's local storage also keeps a few interface preferences on your device. We do not use advertising or third-party analytics cookies.

We retain your account and proposal data for as long as your account is active, or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us, subject to any retention required by law or legitimate business purposes (such as billing records).

You can review and update your account information from within the Service at any time. You can request access to, correction of, or deletion of your personal information by emailing support@c2mtai.cloud.

We use industry-standard technical and organizational measures to protect your information, including encryption in transit and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time. We will update the “Last updated” date above when we do, and material changes will be communicated to active users.

Questions about this policy or your data can be sent to support@c2mtai.cloud.