Privacy
This page explains, in plain language, what this website and the Federal MVP Suite apps collect. Federal MVP Suite is run by Jackson Lopez Holdings LLC ("JLH", "we").
What we collect
- Your account: your email address, a scrambled (hashed) version of your password, your plan, renewal date, and your Stripe customer number. We never see your password itself.
- Contact and early-access requests: the name, email, company, product interest, and message you type into the form. They are stored on our server so we can reply.
- What you enter in the apps: your company profile, credentials, past performance, pipeline, pricing, proposals, and notes. They are stored on our server to run the features you use.
- Contacts you add: names, roles, and work contact details of people you track in the Relationship Dashboard. You add them, they stay in your company's records, and we use them only to run your features. Please add only details you are allowed to keep, such as published work contact information.
- Discount requests: what you tell us to confirm a discount. Never send your Social Security number or a copy of a military ID card.
- Cookies and browser storage: one sign-in cookie that keeps you signed in, and your theme choice (light or dark) saved in your own browser. Nothing else.
- Server logs (IP address, time, page requested) are kept briefly for security and troubleshooting.
What we don't do
- We don't sell or rent your information, and we don't use it for advertising.
- We don't set tracking cookies, and we don't use advertising trackers inside the paid apps, the Relationship Dashboard, or anywhere you've signed in.
- We never submit anything to the government on your behalf, and the apps never send email to your contacts. You send your own emails.
Services that receive data
- Google Cloud Storage holds our nightly backups. They are encrypted on our server before upload, so Google stores only scrambled files it cannot read.
- Stripe processes payments if you buy a plan. Your card or bank details go straight to Stripe; we receive only the plan, status, and renewal date.
- Email: if you turn on the opportunity digest, it is sent through our email provider to the addresses you choose. You can turn it off in the app.
- AI features: if you use an AI drafting or assistant feature, the text sent for that request goes to an AI provider to produce the answer. That is Google Gemini, on a Google Cloud account with billing turned on (Google's paid tier, where Google says it doesn't use your prompts or responses to improve its products). For AI drafts and proposal writing help only, if we have switched on a backup under a paid production agreement, a request may go to NVIDIA’s hosted AI service instead when Gemini is unavailable. A request made with your own Gemini key is never sent to the backup. If you saved your own Gemini key on your account, that request uses your key and your Google account, under Google's terms for your key; we keep the key encrypted and you can remove it anytime.
- Public government APIs and open-data feeds (SAM.gov, USAspending.gov, GSA, Grants.gov, and the California, Texas, and New York City state and local feeds listed on the data sources page) are queried for public data; your private records are not sent to them.
- Google Analytics runs on our public website pages (home, pricing, about, this page, and similar) to see which pages people visit, on what kind of device, and for how long. It's switched off for Google's advertising features and cross-device tracking (Google Signals), and it never runs inside the paid apps, the Relationship Dashboard, or any page you're signed in to — so it never sees your company's records, proposals, or pricing. Read Google's own notice at business.safety.google/privacy.
How long we keep it
We keep your records while your account is open. If you ask us to delete your account, we delete your account and records within 30 days. Encrypted backup copies are replaced over time and may hold them a little longer. We keep payment and tax records as long as the law requires.
Security
See the security page for how we protect your data. If a security problem affects your information, we will tell you as the law requires.
Children
The suite is for businesses and is not meant for anyone under 18.
Your choices
To see, export, correct, or delete what we hold about you, or to delete your account, use the contact form and we will respond within 30 days.
Changes
If we change this page in a way that matters, we update the date above and tell paid customers by email.