FEDSITREP

FedSITREP Privacy Policy

Last updated: October 20, 2026

This policy covers FedSITREP (fedsitrep.veteransolutionstx.com), a service of Veteran Solutions, LLC, a Texas limited liability company based in Waco, Texas ("we," "us"). FedSITREP helps small businesses find federal contract opportunities on SAM.gov. It is for business use by adults. Our company Privacy Policy and Terms of Service cover Veteran Solutions, LLC generally (our websites and services); this policy covers FedSITREP only. The VetSITREP app has its own policy.

What we collect

• Company information. The company name, website, state, and (optionally) UEI you give us when you register, plus the company profile you set up: NAICS codes, set-asides, states, keywords, and email preferences.
• People. Each person's work email address and name, and for a new company its UEI. We compare the email domain you use with the website in the company's public SAM.gov record.
• Sign-in. FedSITREP has no passwords. We email a one-time link. We store a scrambled (hashed) copy of the link, your email address, the time, and the IP address that asked for it. Signing in sets one cookie (__Host-bsid) that keeps you signed in. It is required for the service to work, and it is the only cookie FedSITREP itself uses. (Google's measurement tag, described under "Measurement" below, sets its own cookies only if you accept.)
• Measurement. Every FedSITREP page, including the signed-in screens, loads Google's measurement tag (Google Analytics). A banner asks for your choice first and remembers it in your browser. If you decline, no measurement or advertising cookies are set (the page may still send Google a basic signal, such as the page address and your IP address, without storing a cookie). If you accept, it sets cookies in your browser and sends Google details such as the page you visited, the site that referred you, your browser, device, and operating system, your approximate location (from your IP address), and how you interact with the page. We use it to count visits and measure how our own marketing performs. If you accept, Google may also link your visits across devices where you are signed in to Google, and we may use that to show our ads to people who visited FedSITREP (remarketing). The tag is set to send Google only the page's address without anything after a question mark (so one-time sign-in links are never sent) and no referring address. It never receives your company profile, notices, notes, checklists, or anything you type; the page's content is not sent to Google. You can change your choice at any time with the "Cookie choices" button. You can also block or delete cookies in your browser, or use Google's opt-out add-on. See Google's privacy policy.
• What you do in the app. The notices we find for your company, and the status, notes, checklist answers, and changes you make to them; your searches and how many you have used; and a log of the emails we send (time, recipient, subject, and whether the mail server accepted it, with the most recent 300 kept; no message bodies or sign-in links).
• Technical details. FedSITREP runs on Cloudflare, which processes technical details of each request (such as IP address, browser type, and page requested) to deliver and protect the service. We do not build profiles from them.

Where notice data comes from

Opportunity data comes from SAM.gov, the U.S. government's official source, through its public search service and public data files. Those notices are public information. When we search SAM.gov for you, the search carries your criteria (such as NAICS codes, set-asides, and dates), not your company's name or your people.

How we use it

• To run FedSITREP: find and score notices for your company, show them to your team, and send you the emails you ask for (sign-in links, daily briefings, invitations, and approval messages).
• To verify new companies before access opens, keep the service secure, and prevent abuse.
• To answer questions and fix problems. We do not sell your information or use it to train AI models, and we do not give it to anyone for their own advertising. The only advertising-related sharing is the Google measurement tag described above.

AI checklists

When you press the AI button on a notice, FedSITREP sends the notice's public solicitation documents and notice details to an AI model running on Cloudflare Workers AI (Cloudflare's data-usage page) to draft a requirements checklist. To improve results it may also send short examples of requirement wording that your own company previously corrected. It does not send your company profile, your notes, or anyone's email address. AI can miss or misread requirements; see the Terms.

Who can see your information

• Your company's team. People you or your company's administrators add can see the company's profile and notices. Each person can also keep personal settings and private cards.
• Us. Veteran Solutions staff can see company and account information as needed to review registrations, run and support the service, and keep it secure.
• Service providers. Cloudflare (hosting, database, and AI), our own mail server, which sends FedSITREP's email, and Google (the measurement tag). We share information otherwise only when you ask us to or the law requires it.

How long we keep it

• Sign-in links work once and expire in 15 minutes; expired links are deleted within a day. A session ends after 30 minutes without activity or 8 hours at most, and the app signs you out after 15 minutes idle.
• Unconfirmed or replaced registration requests are deleted after 2 days; declined requests are kept as a record of the review. An approved request is deleted when its company is deleted.
• Notices and history. Notices come from SAM.gov and are removed from FedSITREP two days after their response deadline. When that happens, your company's card for the notice stays as a read-only history row with your notes, answers and checklist, so you can copy or download them (the History tab has a CSV download). We delete each history row, and any documents you added to it, 90 days after the notice was removed; from day 45 the row shows its deletion date.
• Company and account information is kept while the account is active. Idle free accounts are deleted automatically. If nobody from a free company signs in for 30 days, we pause its daily emails and searches; at 45 and 55 days we email the company's administrators a reminder, and at 60 days we delete the company's profile, people, notices, notes, and answers. Signing in at any time before that keeps the account. Paid accounts are not deleted for inactivity while the subscription is active. If a person is removed, their access ends at once and their private cards are deleted. If a company closes its account, we delete its profile, people, and notices on request, except records we need for legal or business reasons.

How we protect it

Connections use HTTPS. Sign-in uses one-time links that are stored only in hashed form, sessions are short, and removing a person signs them out immediately. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Your choices

You can ask what we hold about you or your company, ask us to correct it, or ask us to delete it. Email privacy@veteransolutionstx.com and we will respond within a reasonable time. Company administrators can manage people and the profile on the Team and Company profile pages. Depending on where you live, state law may give you additional rights, and we will honor valid requests.

Children

FedSITREP is a business tool for adults. We do not knowingly collect information from anyone under 18.

Changes

If we change how we handle information, we will update this page and its date, and for material changes tell users in the app or by email.

Contact

Questions: privacy@veteransolutionstx.com.