Effective Date: March 31, 2026 · Last Updated: June 13, 2026
The short version: GovForge is a desktop application. Your company profile, opportunity data, and BD strategy never leave your machine. Sans Peur Strategies does not collect, store, or sell your business data.
GovForge is a product of Sans Peur Strategies Inc. ("Sans Peur Strategies," "we," "us," or "our"), a Virginia corporation. Our contact address is louis@spstrategies.co.
GovForge is a Windows desktop application. The vast majority of your data never leaves your computer.
Data that stays on your machine:
This data is stored locally in your Windows user profile at %APPDATA%\GovForge. Sans Peur Strategies has no access to it.
Data we do collect:
Where your account data lives. Our license server, cache service, and download infrastructure are hosted on DigitalOcean in the United States (New York region). All server-side data we hold — your email, license key, and usage counters — is stored and processed exclusively in the United States; we do not transfer it outside the U.S. API traffic to our servers is routed through Cloudflare, which provides content-delivery and network-security services and processes request metadata (IP address, endpoint, timestamp) on our behalf. Cloudflare does not receive your company profile, opportunity data, or SMS messaging data.
When you use AI scoring, the text of the solicitation being analyzed is sent over HTTPS to Anthropic's API for processing. Your company profile is included as context in that request so Claude can score the opportunity against your capabilities.
That request goes: your machine → our license server (for usage tracking) → Anthropic. We do not store the content of these requests. Anthropic's data handling is governed by Anthropic's Privacy Policy.
We never send your full BD database, historical opportunity records, or notes to any external service. Only the specific solicitation being scored is transmitted.
Payments are processed by Stripe, Inc. We do not receive or store your credit card number, bank account details, or payment credentials. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.
We send transactional emails in two situations: when you request a free trial (a verification link to activate your one-score trial license), and when you purchase a subscription (a welcome email containing your license key). We use Resend to deliver these emails. We do not send marketing emails without your consent. You can opt out of any marketing communications by replying to any email with "unsubscribe."
SMS / text messaging. If you provide your mobile phone number — by giving it to our staff, by texting our number, or through a form — Sans Peur Strategies may send you text messages strictly for 1:1 customer support: responding to questions you text in, confirming meetings you have requested, and following up after calls. We do not send marketing, promotional, or automated text messages of any kind. Message frequency varies based on communication needs. Message and data rates may apply. You can cancel at any time by replying STOP; reply HELP for help, or contact louis@spstrategies.co. The full messaging terms are in the "Messaging Terms & Conditions" section below.
Data sharing.
GovForge is designed to minimize your third-party data exposure. Because your company profile, capabilities, and BD strategy data are stored locally on your machine, GovForge is designed to minimize its footprint in your CMMC Level 2 third-party vendor assessment scope for that data category. Your C3PAO makes the final scoping determination.
The outbound connections GovForge makes are limited to: SAM.gov (federal opportunity data), Anthropic (AI scoring of individual solicitations), and our license server (usage validation). These connections use HTTPS and do not transmit your internal BD database.
This is not legal or compliance advice. Consult your C3PAO or compliance counsel for specifics on your CMMC assessment scope.
License, usage, and tracked-opportunity records are retained for the duration of your subscription plus 90 days after cancellation, then deleted — if you resubscribe with the same email within that window, your tracked opportunities carry over. Security audit logs (authentication, billing, and license-key events) are retained for up to 3 years for security and compliance, then automatically purged. Server access logs are retained for 30 days. We never sell your data. You can request deletion of your account data at any time by emailing louis@spstrategies.co.
You have the right to:
To exercise any of these rights, email louis@spstrategies.co. We will respond within 30 days.
Our license server uses HTTPS (TLS 1.2+) for all connections. License keys are validated using parameterized database queries. We do not store plaintext passwords. Server access is restricted to SSH key authentication.
If a data breach affects your personal information, we will notify you by email at the address on your account without undue delay and as required by applicable law.
GovForge is a B2B professional tool not directed at children under 13. We do not knowingly collect personal information from children.
If we make material changes to this policy, we will send an email to the address on your account at least 14 days before the changes take effect. Continued use of GovForge after that date constitutes acceptance of the updated policy.
Questions about this policy? Email us at louis@spstrategies.co.
Sans Peur Strategies Inc.
GovForge Product Division
This policy applies to the GovForge desktop application and the govforge.ai website. It does not apply to other Sans Peur Strategies products.