Privacy Policy

Who we are

The Mullings Group ("TMG", "we") runs rfx and this website. This policy says what information we keep, why, and who else handles it.

What we collect

• Your account: name, email address, a scrambled form of your password (we cannot read it), and, if you turn it on, your two-step sign-in setup.
• Your company information: services, NAICS codes, certifications, ownership and size facts, limits, teaming partners and state registrations.
• Locked information: company identifiers (such as EIN, CAGE and UEI), W-9 details such as your tax ID, procurement portal logins and your Claude API key. These are locked with encryption and nobody can read them back on screen.
• Bid results: the bids rfx finds for you, its verdicts and memos.
• Activity records: sign-ins and changes made in rfx, with the time, the internet address and the browser used.
• Demo requests: the name, company, email address and message you send with the demo form.

Cookies

We use two cookies: one keeps you signed in, and one protects forms from forged requests. We do not use advertising or tracking cookies.

How we use it

We use your information to run rfx for you: to search and assess bids, to show your dashboard, to sign in to portals where you are a registered vendor, to send account emails, and to keep rfx secure. We do not sell your information.

Who else handles it

• Anthropic (Claude) reads bid documents and your company profile to assess bids. rfx never sends it your identifiers, W-9 details, passwords or keys.
• Supabase stores the rfx database in the United States.
• Replit hosts this website.
• Resend sends our emails, such as invitations and password resets.
• Cloudflare confirms the rfx bot's identity to websites. It does not receive your company information.

How we protect it

Locked information is encrypted with a key that belongs to your company. Passwords are scrambled so nobody can read them. Each company sees only its own information. Only TMG's administrator can see every company.

How long we keep it

We keep your information while your company uses rfx. Your company settings may delete bid attachments after a set number of days. If TMG permanently deletes your company, all of its information is deleted.

Your choices

You can see and change your company information and profile in rfx. To get a copy of your information or to have it deleted, contact us.

Children

rfx is a business service and is not for children.

Changes to this policy

We may change this policy. The version label at the top of this page changes when we do.

Contact

The Mullings Group: info@themullingsgroup.com