Privacy Policy
This Privacy Policy explains how Federal Bid Partners LLC (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you access or use the CMMC ReadySuite website, software, and related services (the “Service”).
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the Service.
- We collect information you provide, usage data, and technical data needed to run the Service.
- Payments may be processed by Paddle as Merchant of Record; we do not store full card numbers.
- We use reasonable administrative, technical, and organizational safeguards, but no system is 100% secure.
- You can request access, correction, or deletion as described below.
1. Information We Collect
a) Information you provide
- Account info (name, email, password or auth identifiers, organization name).
- Contact info (email, phone number if you choose to provide it).
- Support communications (messages, attachments, and related metadata).
- Compliance workflow inputs you enter (e.g., system descriptions, device counts, environment details, policy selections, evidence notes).
b) Automatically collected information
- Usage data (pages viewed, actions taken, features used, timestamps).
- Device and log data (IP address, browser type, operating system, device identifiers, referrer URLs, crash logs).
- Security signals (authentication events, suspicious activity indicators).
c) Payment and billing information
If Paddle is Merchant of Record for your purchase, Paddle may collect and process payment details (such as card information) and billing details. We typically receive limited billing metadata (e.g., customer email, order identifiers, plan, status) to provision access and support customers.
2. How We Use Information
We use information to:
- Provide, operate, maintain, and improve the Service and its features.
- Create and export your selected documents/diagrams/outputs based on your inputs.
- Authenticate users, prevent fraud, and protect the security and integrity of the Service.
- Process transactions, provision access, manage subscriptions, and provide customer support.
- Send transactional communications (account, security, receipts, service updates).
- Send marketing communications only where permitted and/or with required consent (you can opt out).
- Comply with legal obligations and enforce our Terms.
3. How We Share Information
We may share information in the following circumstances:
- Service providers. With vendors who help run the Service (hosting, databases, analytics, email/SMS delivery, customer support tools), under confidentiality and security obligations.
- Payments. With Paddle and/or other payment-related parties as needed to process transactions, prevent fraud, handle disputes, and comply with tax/legal requirements.
- Legal & safety. If required by law, subpoena, court order, or if we believe disclosure is necessary to protect rights, safety, or prevent fraud/abuse.
- Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets (with appropriate protections).
We do not sell personal information in exchange for money. We do not knowingly collect personal information from children under 13.
4. Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information. These may include access controls, encryption in transit (HTTPS), monitoring, and least-privilege practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your credentials and limiting access to authorized users.
5. Data Retention
We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and context. You may request deletion as described below, subject to legal and operational requirements.
6. Your Rights & Choices
- Access/Correction. You can request access to or correction of certain information.
- Deletion. You can request deletion of your account and associated data, subject to required retention.
- Marketing opt-out. You may opt out of marketing emails via the unsubscribe link. For SMS, reply STOP.
- Cookies. You can control certain cookies through browser settings. Some cookies are required for core functionality.
To exercise rights, contact: contact@federalbidpartners.com.
7. International Users
If you access the Service from outside the United States, your information may be transferred to and processed in the United States and other jurisdictions. Where required, we rely on appropriate safeguards for international transfers.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates on this page and revise the effective date. Your continued use after an update constitutes acceptance.
9. Contact
Questions or requests regarding this Privacy Policy should be sent to: contact@federalbidpartners.com.