Privacy Policy Last Updated: August 28, 2026
Updated to expand the AI Assistants and Connected Apps section.
This Privacy Policy (“Policy”) describes how "GOVLY, INC." (“Govly,” “we,” or “us,” or “our”) collects and uses Personal Information when you visit our website and engage with our platform (the “Sites” and "Services") or otherwise engage with us, including via email. This Policy does not apply to information we collect about employees, job applicants, and independent contractors. By accessing the Sites and Services, you agree to our collection and use of Personal Information as described in this Policy and in our Terms of Use.
For purposes of this Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include de-identified or aggregate information, or public information lawfully available from governmental records.
We collect your Personal Information when you visit, navigate around and use our Sites and Services, submit information about commercial or government contracting activities to our platform, request information about our services, register an account with us, send us email communications, and submit comments or otherwise interact with the Sites and Services. We may also collect Personal Information from government databases in the public domain regarding government contracting opportunities.
The information we collect may include Personal Information such as your name, professional title and employer or company affiliation, business email address, business telephone number, and account credentials and authentication information. We may also collect information about the government contracts or commercial opportunities with which you have indicated to us you are associated with or otherwise are interested in.
We store the records and content you or your organization create in the platform, such as opportunities you follow, workspaces, comments, notes, saved searches, custom field values, and documents you upload. We do not collect categories of personal information beyond those described in this Policy.
We may also collect Personal Information from you automatically, when you visit our Sites and Services. This information may include your IP address, your device and browser type, information about your interaction with our Sites and Services.
Summary for connected app users:
Govly allows authorized users to connect Govly with third-party AI assistants, productivity tools, and other connected applications, including Model Context Protocol (“MCP”) clients and connector experiences such as ChatGPT, Claude, Cursor, and similar tools.
When you authorize or use a connected app, that app may call Govly on your behalf using an OAuth access token, API key, or service-account credential associated with your Govly account or organization. Connected app access is limited to the Govly data and actions available to the authenticated user, their organization, their permissions, their subscription, and the features enabled for that organization.
Depending on the connected app and the action requested, Govly may process:
Govly limits connector processing to what is needed to perform the requested action. Govly does not receive or store your ChatGPT or Claude conversation history, prompts unrelated to a Govly tool call, or content from other apps you use in that client. Govly's connector logs record metadata about each tool call, including the tool name, the authenticated user and organization, the client or application making the request, the request outcome, and timing. Govly does not log the text of assistant prompts, the arguments passed to a tool, or the response bodies returned. Connector access introduces no new categories of personal information and no new categories of service providers beyond those described in this Policy. Tool responses return only the fields needed to answer the request and do not include authentication secrets, tokens, or API keys.
Connected apps may read Govly records. When authorized by the user, they may also take actions in Govly, such as creating or updating workspaces, comments, saved searches, follows, inbox decisions, not-interested marks, document download links, or share emails.
Govly does not require users to submit passwords, MFA codes, payment card numbers, Social Security numbers, protected health information, or similar sensitive identifiers through connected app tool inputs.
If you use Govly through a third-party client, that client may receive the Govly data returned by the connected app. For example, if you use Govly through ChatGPT, Claude, Cursor, or another MCP or AI-assistant client, that provider may receive the requests you provide through its client and the Govly responses returned to that client. Your use of the third-party client is governed by your relationship with that provider.
Govly does not sell personal information. Govly does not use your content or connector data to train AI models, and the AI providers Govly uses to process your content are contractually prohibited from using it to train theirs. AI outputs in Govly are recommendations for your review and are not automated decisions producing legal or similarly significant effects.
Govly cannot control how the AI assistant client you choose handles your conversation with it. Your use of ChatGPT, Claude, Cursor, or another client is governed by that provider's own terms and privacy policy.
Users can control connected apps by choosing what prompts, records, documents, comments, notes, and workflow instructions they send through them. You can disconnect a connected app at any time from your Govly account settings. Revocation takes effect immediately and invalidates the associated access token, after which the connected app can no longer read or modify your Govly data. You may also revoke or rotate API keys and service-account keys at any time. Organization administrators may manage users, roles, service accounts, and access according to Govly settings and the applicable customer agreement.
We use your Personal Information to provide you access to our platform and to provide you with our services. We may also use Personal Information to contact you from time to time to provide you with information related to the services we provide, customer support, and notices we are required to provide to you.
We also use Personal Information about your use of our Sites and Services to monitor and improve our Sites and Services; for internal business analysis; to prevent fraud, activities that violate our Terms of Service or that are illegal; and to protect our rights and the rights and safety of our users or others.
We may share Personal Information with other Govly users when you or your organization choose to make information available to them, such as by adding users to an organization or workspace, sharing records, posting information on a Govly organization profile, or using collaboration features.
We may share Personal Information with service providers that help us operate our business, including providers for hosting, cloud storage, authentication, security, analytics, email, customer support, payment processing, AI routing or model inference, search, monitoring, legal, accounting, and other business functions.
We may also share Personal Information with third-party applications or connected apps that you or your organization authorize to access Govly, as described in the “AI Assistants and Connected Apps” section.
We may also share your Personal Information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities. We may also share your Personal Information with third parties to help detect and protect against fraud or data security vulnerabilities. And we may transfer your Personal Information to a third party in the event of a sale, merger, reorganization of our entity or other restructuring.
You may update certain account information through your Govly account settings. You may also contact Govly to request access to, correction of, deletion of, or export of Personal Information, subject to applicable legal, contractual, security, and retention requirements.
You may opt out of non-transactional marketing emails by using the unsubscribe link in those emails or by contacting us. You may control cookies through your browser settings, though disabling cookies may affect some functionality.
You can disconnect a connected app at any time from your Govly account settings. Revocation takes effect immediately and invalidates the associated access token, after which the connected app can no longer read or modify your Govly data. You may also revoke or rotate API keys and service-account keys at any time. Organization administrators may manage users, roles, service accounts, and access according to Govly settings and the applicable customer agreement.
Cookies are small, sometimes encrypted text files that are stored on computer hard drives by websites that you visit. They are used to help users navigate websites efficiently as well as to provide information to the owner of the websites. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please visit www.allaboutcookies.org.
When you visit the Site, we may place a “cookie” or other online tracking device (e.g. web beacons) that recognizes you when you visit the Sites and Services. These are used for technical convenience to store information on your computer. For instance, we may use a session cookie to store form information that you have entered so that you do not have to enter such information again. We may use information stored in such text files and images to customize your experience on this website and to monitor use of this website. You may set your browser to notify you when you receive a cookie. Many web browsers also allow you to block cookies. If you block cookies you may not be able to access certain parts of this website. You can disable cookies from your computer system by following the instructions on your browser or at www.youradchoices.com.
We do not disclose Personal Information to third parties for their direct marketing purposes.
We do not respond to browsers’ Do Not Track signals at this time.
Our products and services are not directed to minors under the age of 13 and we do not knowingly collect the Personal Information of minors under 13.
Govly stores and processes Personal Information on cloud infrastructure located in the United States. AI inference for Govly features, including connector-initiated requests, is performed in the United States.
We implement and maintain reasonable security measures appropriate to the nature of the Personal Information that we collect, use, retain, transfer or otherwise process. Those measures include administrative, physical and technical safeguards to protect the security, confidentiality and integrity of Personal Information. However, data security incidents and breaches can occur due to a variety of factors that cannot reasonably be prevented; therefore, our safeguards may not always be adequate to prevent all breaches of security.
Our Site may contain links to other websites. We are not responsible for the privacy practices or the content of those websites. This Privacy Policy applies only to our business and the Personal Information we collect.
Govly retains Personal Information for as long as reasonably necessary to provide the Services, maintain business records, comply with legal and contractual obligations, resolve disputes, enforce agreements, protect security, and operate our platform.
Customer data and application records are retained in accordance with the applicable customer agreement and Govly’s data management practices. Logs, audit records, backups, support records, and security records may be retained for different periods depending on their purpose, legal requirements, contractual requirements, and security needs.
For AI-enabled features and connected apps, Govly retains product conversations, messages, generated outputs, connector-created records, and related application records in accordance with the applicable customer agreement and Govly's data management practices. AI request metadata is retained for 180 days. Eligible gateway responses may be cached for up to 10 minutes.
Govly's AI providers do not use your content to train their models. Provider-side retention, caching, abuse monitoring, and deletion practices are governed by the applicable provider agreement and account configuration.
When Personal Information is no longer needed for the purposes described in this Policy, Govly deletes, de-identifies, aggregates, or otherwise disposes of it in accordance with applicable requirements.
We may review and update this Policy from time to time. We will post those changes on the website or update the “last updated” date of the Privacy Policy. If the changes are material, you will be notified via email or a notice on our website.
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us at success@govly.com.
If there are any questions regarding this Policy or to request a copy of this Policy in another format you may contact us using the information below.
Customer Success Team