Privacy Policy

GovConEdu LLC ("GovCon Giants," "Mindy," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit getmindy.ai, govcongiants.com, shop.govcongiants.com, and use our services.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Purchase our products or services
• Subscribe to our email list or SMS notifications
• Register for webinars or bootcamps
• Contact us with inquiries

This information may include:

• Name
• Email address
• Phone number
• Company name
• Payment information (processed securely via Stripe)

Usage Information

We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our site.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you marketing and promotional communications (with your consent)
• Send you SMS notifications and alerts (with your explicit consent)
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities

3. SMS / Text Message Communications

By providing your phone number and opting in to receive SMS communications, you consent to receive text messages from Mindy / GovCon Giants. These messages may include:

• Daily intelligence briefings with government contracting opportunities
• Alerts about expiring contracts and recompete opportunities
• Important updates about your account or purchases
• Webinar and bootcamp reminders

SMS Opt-In and Consent

You must explicitly opt in to receive SMS messages from us. We collect your consent through:

• Checking a checkbox or clicking a button indicating your consent to receive SMS messages
• Enabling SMS notifications in your account settings
• Providing your phone number during checkout with SMS opt-in selected

Message frequency: Varies based on your subscription. Daily briefing subscribers receive 1 message per day. Other notifications are sent as needed.

Message and data rates may apply. Check with your mobile carrier for details.

How to Opt Out of SMS

You can opt out of receiving SMS messages at any time by:

• Replying STOP to any message you receive from us
• Updating your preferences in your account settings
• Contacting us at hello@getmindy.ai

After opting out, you will receive one final confirmation message. You will no longer receive SMS messages from us unless you opt in again.

4. Email Communications

By providing your email address, you may receive:

• Daily intelligence briefings
• Product updates and announcements
• Marketing and promotional content
• Transactional emails (receipts, confirmations)

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email.

5. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Companies that help us operate our business (payment processing, email delivery, SMS delivery, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Where Your Data Is Stored

Your account data, saved research, and usage records are stored in our PostgreSQL database hosted by Supabase in the United States (AWS US-West-2, Oregon), with a read replica in the same region. Our application is hosted on Vercel. Payment details are processed and stored by Stripe — we never store full card numbers on our systems.

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We keep your information only as long as we need it for the purpose it was collected:

• Account information(name, email, company, targeting preferences) — for as long as your account is active.
• Saved work(research, market reports, proposal drafts, pipeline, contacts) — for as long as your account is active, so you can return to it.
• Usage and billing records(tool-call logs, credit ledger) — retained while your account is active, because they are the audit trail behind your balance and invoices.
• Authentication tokens— access tokens expire after 1 hour, refresh tokens after 60 days, and authorization codes after 5 minutes and are single-use. Revoking a connection invalidates them immediately.
• Email and SMS delivery records— kept while your account is active so we can honor unsubscribe and STOP requests and prove consent.

Deletion. You can ask us to delete your account and its data at any time by emailing hello@getmindy.ai. We action deletion requests within 30 days. Deleting your account removes your saved work and activity records. We may retain a minimal record of a transaction where tax, accounting, or legal obligations require it, and we may keep anonymized, aggregated statistics that cannot identify you.

8. AI Processing and Model Providers

Mindy is an AI product. To answer your questions, extract requirements from solicitations, and draft proposal content, we send the relevant text to third-party large language model providers. Depending on the task, that may include OpenAI, Anthropic, Groq, and xAI. We use multiple providers so the service stays available when any one of them is rate-limited or down.

Sensitive content is restricted to a narrower set.When a request involves your own business information — your capability statements, past performance, personnel details, or a proposal draft grounded in them — we classify it as sensitive and route it only to providers we have vetted as not training on our data. Sensitive content is never sent to xAI. This restriction is enforced in our code, not by policy alone: a configuration change cannot override it.

We do not use your business information to train our own models. We do not sell it. Public federal data returned to you (SAM.gov notices, USASpending awards, and similar) is government data, not your data, and carries no such restriction.

9. The Mindy Connector for AI Assistants (MCP)

Mindy can be connected to AI assistants that support the Model Context Protocol (MCP), including Claude, at https://mcp.getmindy.ai/mcp. If you connect it:

• You authorize the connection through a standard OAuth consent screen. We never receive your credentials for the AI assistant, and the assistant never receives your Mindy password.
• The assistant can then call Mindy tools on your behalf. Most tools only read data. Two write: one generates a market report and saves it to your account, and one adds contacts to a CRM you have connected. Tools that write are declared as such, so your assistant asks before running them.
• We log each tool call — which tool, when, and what it cost in credits — because that is your billing record. We do not store the surrounding conversation, and Mindy does not read your chat history, memory, or files.
• Anything a tool sends back to your assistant is then handled under that assistant vendor's privacy policy, not ours. Disconnecting the connector in your assistant's settings revokes its access immediately.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Opt out of marketing communications
• Opt out of SMS communications

To exercise these rights, contact us at hello@getmindy.ai.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

• GovConEdu LLC
• Email: hello@getmindy.ai