Privacy Policy

Effective date: September 29, 2026

This Privacy Policy explains how Levitate Growth LLC ("Levitate", "we", "us") collects, uses, shares and protects information when you use Bid Levitate, our RFP response platform, and our website (together, the "Service").

1. Information we collect

Information you give us

• Account details: your email address, company name and password. Passwords are stored only in hashed form.
• Company profile: what you enter about your organization, such as services, certifications, references, pricing, contacts, logo and brand guidelines, and any presentation template you upload.
• Your content: RFP documents and other files you upload, notes and decisions you record, and the analyses, proposals and slides generated for you.
• Leads: the public RFP listings shown to you in Leads, and what you do with each one (added to your pipeline or skipped).
• Contact requests: your name, email, company, expected volume and message when you contact us.
• Billing: payments are handled by Stripe. We do not receive or store your card number. We keep Stripe's customer and subscription identifiers and a record of each payment's plan, amount, date and status.

Information collected automatically

• Usage records: counts and timestamps of actions such as RFP screenings and document generation, and the number of AI tokens each one uses. We use them to apply plan limits and to show you your usage in Settings.
• Technical data: a session cookie that keeps you signed in, and server logs that include your IP address and details of each request, kept for security and troubleshooting.

Personal information about other people

RFPs and your profile can contain names and business contact details of other individuals, such as procurement officers or client references. You are responsible for having the right to provide that information to us. For that content we act as your service provider and process it only on your instructions.

2. How we use information

• To provide and operate the Service, including analyzing RFPs and generating documents and slides.
• To create and secure your account, verify your email and sign you in.
• To process payments, manage subscriptions and apply plan limits.
• To send service messages such as verification links, password resets and billing or security notices.
• To answer support and demo requests.
• To maintain, troubleshoot and improve the Service using usage records and logs.
• To detect and prevent abuse and to comply with legal obligations.

We do not use your content to train our own models, and we do not use it for advertising.

3. AI processing

To analyze RFPs and draft content, we send the relevant text of your documents and profile to third-party artificial intelligence (AI) service providers, which process it on our behalf and return a result. These providers act as our service providers and handle information under their own terms and privacy practices. We send only what is needed for the request.

Please do not submit information you are not permitted to share with these providers.

4. How we share information

We share information only as described here:

• Service providers that help us run the Service: AI providers (section 3), Stripe for payments, and providers of hosting and email delivery.
• Legal and safety: where we believe disclosure is required by law or legal process, or is needed to protect the rights, property or safety of users, us or others.
• Business changes: in connection with a merger, acquisition or sale of assets, with notice to you where required.
• With your direction or consent.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies and browser storage

We use one session cookie that is strictly necessary to keep you signed in, and a small item of browser storage that remembers that you are signed in. We do not use advertising or third-party tracking cookies. If we add analytics tools, we will update this policy first.

6. Retention and deletion

• While your account is active we keep your account, profile, files, generated documents and usage records.
• When you delete your account from Settings, we cancel any active subscription and delete your account, RFPs, uploaded files, generated documents, notes, leads, company profile, logo and templates, sign-in tokens and usage records.
• Billing records (plan, amount, date and status of payments) are kept as long as needed for accounting, tax and legal purposes. Stripe keeps its own records under its policies.
• Backups and logs: copies held in backups are removed as those backups are rotated out, and server logs are kept for a limited period.
• Contact requests are kept as long as needed to respond and to keep a record of the conversation.

7. Security

We protect information with measures such as hashed passwords, a protected session cookie, encrypted connections and optional two-step verification, which you can turn on in your account settings. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and tell us straight away if you suspect unauthorized access.

8. International transfers

We are based in the United States and process information there. Our service providers may process it in the United States and other countries. Where the law requires it, we rely on recognized safeguards for transfers of personal information out of the European Economic Area, the United Kingdom or Switzerland.

9. Your rights and choices

You can view and edit your profile in the Service and delete your account from Settings at any time. To exercise any of the rights below, or to ask for a copy of your information, email bid@levitate.works. We may need to verify your identity, and we will respond within the time the law requires.

Everyone

You can ask us to access, correct or delete personal information we hold about you, and you can ask questions about this policy.

European Economic Area, United Kingdom and Switzerland

You may have the right to access, correct, erase, restrict or object to the processing of your personal information, and to receive it in a portable format. We process it to perform our contract with you, for our legitimate interests in running and securing the Service, to meet legal obligations, and with your consent where we ask for it. You may also complain to your local data protection authority.

California

California residents may have the right to know what personal information we collect, use and disclose, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in California law, so there is nothing to opt out of. You may use an authorized agent to make a request on your behalf.

10. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will change the effective date above, and if a change is material we will notify you in the Service or by email before it takes effect.

12. Contact us

Questions or requests about privacy? Email bid@levitate.works, use our contact form, or write to: