Privacy Policy
Last updated: May 13, 2026
1. Introduction
RFPForge provides AI-powered RFP health scanning, document analysis, and proposal drafting support. RFPForge is an independently operated software service. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use the service.
Unless otherwise stated on a specific invoice or billing record, RFPForge is operated under the RFPForge brand by Pei Guoqiang. Questions about this policy, account data, or privacy-related requests can be sent to support@kekelabs.com.
2. Service Availability
RFPForge is currently not offered to users in the European Union (EU), European Economic Area (EEA), the United Kingdom, or Switzerland. We do not actively market the service in those regions at this time. Users located in those regions should not access or use the service.
3. Information We Collect
Account Information
We collect your email address when you request a magic link, create an account, or contact support.
Uploaded Files and Content
We process uploaded RFP files, extracted text, prompts, and generated outputs to provide scanning, knowledge-base, and drafting features.
Usage and Technical Data
We collect service usage information such as scan activity, document metadata, authentication events, and basic technical logs needed to operate and secure the platform.
Billing and Support Data
Payment processing is handled by Dodo Payments as the billing provider, and support requests may include your email address and issue details.
4. Data Security
We apply reasonable administrative, technical, and organizational safeguards to protect your data in transit and at rest. Access to stored data is limited to the systems and providers required to deliver the service, and user content is logically isolated at the application and database levels.
We aim to use commercially reasonable providers with contractual data protection commitments where appropriate. Even so, no internet service can guarantee absolute security, and RFPForge is not designed for emergency, life-critical, or real-time operational use.
5. Privacy Requests
- Contact us with questions about the categories of personal data associated with your account
- Request review of account-related deletion or correction requests through support
- Delete individual knowledge-base documents from the product interface to remove their indexed workspace records
- Ask questions about how your information is processed and retained
- Use support@kekelabs.com as the primary contact for privacy-related inquiries
6. Cookies, Analytics, and Similar Technologies
We may use analytics, security, and operational cookies or similar technologies to keep the service running, understand product usage, prevent abuse, and support troubleshooting. These technologies may be provided by RFPForge or by third-party infrastructure and service providers acting on our behalf.
7. Data Retention Policy
RFPForge applies strict data-minimization principles:
Uploaded Files
Temporary uploaded source files are removed after processing completes. Extracted content that is needed for product features may continue to be stored in your account workspace or related records. Deleting a document from your knowledge base removes the stored document record together with its indexed retrieval chunks for that workspace.
AI Prompts & Outputs
Generation requests and AI outputs may be stored as temporary response records so we can deliver the feature, show generation history, and complete background processing. These records are subject to automated retention cleanup based on the generated-output retention window configured for your workspace, which currently supports 24 hours, 7 days, or 30 days. Records may still be retained temporarily for operational troubleshooting, security review, or other legitimate service needs.
Vector Embeddings
Embeddings and related metadata may be retained while your account or stored knowledge base remains active so we can support search and generation features. These records remain scoped to your workspace and are not shared across customer accounts.
Account Deletion
If you would like us to delete your account, please contact support@kekelabs.com. We currently handle deletion requests through manual support review rather than a self-service account deletion workflow. Self-service deletion tools may be introduced in future updates. We will review and process deletion requests within a reasonable operational timeframe, unless retention is required for security, billing, fraud prevention, or legal reasons.
8. AI Sub-Processors & International Data Transfers
To operate the service, RFPForge relies on third-party sub-processors for model inference, embeddings, hosting, payments, and transactional email delivery. Our current primary sub-processors are:
| Sub-Processor | Purpose | Data Location | Applicable Plans |
|---|---|---|---|
| Configured AI model provider(s) | Primary chat, generation, and scan inference | May vary by configured provider and deployment region | Free / Starter / Pro |
| Configured embedding provider(s) | Embedding model inference | May vary by configured provider and deployment region | All plans |
| Dodo Payments | Payment processing | May vary by configured provider and applicable service region | Paid plans |
| Resend | Transactional email delivery | United States | All plans |
| Cloud infrastructure providers | Application hosting, storage, and networking | May vary by deployment region | All plans |
Provider Selection
We aim to use commercially reasonable providers with data protection commitments appropriate to the role they perform for the service. Supporting vendors may change over time as our infrastructure evolves.
International Data Transfers
Document excerpts, prompts, and embeddings required for AI inference may be transmitted to the configured model or embedding providers in the regions where those providers operate. Transactional email and payment data may be processed by Resend and Dodo Payments in the United States or other applicable service regions.
Data Minimization
We aim to send only the information needed to deliver the requested feature, and we do not sell customer data or use customer content to train our own models, foundation models, or shared AI systems operated by RFPForge.
We may update this list from time to time as our infrastructure evolves. For privacy questions, contact support@kekelabs.com.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please reach out to us:
RFPForge is operated under the RFPForge brand by Pei Guoqiang. We use support@kekelabs.com as the primary privacy and support contact for this service.
support@kekelabs.com