Privacy Policy
Last updated: May 11, 2026
1. Introduction
RFPForge provides AI-powered RFP health scanning, document analysis, and proposal drafting support. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the service.
2. Service Availability
RFPForge is currently not offered to users in the European Union (EU), European Economic Area (EEA), the United Kingdom, or Switzerland. We do not actively market the service in those regions at this time.
3. Information We Collect
Account Information
We collect your email address when you request a magic link, create an account, or contact support.
Uploaded Files and Content
We process uploaded RFP files, extracted text, prompts, and generated outputs to provide scanning, knowledge-base, and drafting features.
Usage and Technical Data
We collect service usage information such as scan activity, document metadata, authentication events, and basic technical logs needed to operate and secure the platform.
Billing and Support Data
Payment processing is handled by Paddle as merchant of record, and support requests may include your email address and issue details.
4. Data Security
We apply reasonable administrative, technical, and organizational safeguards to protect your data in transit and at rest. Access to stored data is limited to the systems and providers required to deliver the service, and user content is logically isolated at the application and database levels.
5. Your Rights
- Request access to the personal data we hold about you
- Request correction or deletion of your account-related data
- Ask questions about how your information is processed
- Opt out of non-essential communications
6. Data Retention Policy
RFPForge applies strict data-minimization principles:
Uploaded Files
Temporary uploaded source files are removed after processing completes. Extracted content that is needed for product features may continue to be stored in your account workspace or related records.
AI Prompts & Outputs
AI generation outputs stored as response artifacts are subject to automated retention cleanup and are currently purged after 24 hours unless otherwise retained as part of a user-facing record.
Vector Embeddings
Embeddings and related metadata may be retained while your account or stored knowledge base remains active so we can support search and generation features.
Account Deletion
If you request account deletion, we will process the request within a reasonable operational timeframe unless retention is required for security, billing, or legal reasons.
7. AI Sub-Processors & International Data Transfers
To operate the service, RFPForge relies on third-party sub-processors for model inference, embeddings, hosting, payments, and transactional email delivery. Our current primary sub-processors are:
| Sub-Processor | Purpose | Data Location | Applicable Plans |
|---|---|---|---|
| DeepSeek | Primary LLM inference | China (PRC) | Free / Starter / Pro |
| SiliconFlow | Embedding model inference | China (PRC) | All plans |
| Paddle | Payment processing | United Kingdom / Global | Paid plans |
| Resend | Transactional email delivery | United States | All plans |
| Cloud infrastructure providers | Application hosting, storage, and networking | May vary by deployment region | All plans |
International Data Transfers
Document excerpts and prompts required for inference may be transmitted to DeepSeek and SiliconFlow in China. Transactional email and payment data may be processed by Resend and Paddle in the United States, the United Kingdom, or other applicable service regions.
Data Minimization
We aim to send only the information needed to deliver the requested feature, and we do not sell customer data or use customer content to train our own models.
We may update this list from time to time as our infrastructure evolves. For privacy questions, contact support@kekelabs.com.
8. Contact Us
If you have any questions about this Privacy Policy or our data practices, please reach out to us:
support@kekelabs.com