Privacy & data policy
Your data stays yours.
Plain language, no legalese. What we collect, what we never store, and who processes what. Last updated July 14, 2026.
The short version
We collect the minimum needed to run the site: an email address when you sign up or request something, anonymous usage data to understand what is useful, and the inputs you choose to give our free tools while they generate your result. We do not sell your data, we do not share it with vendors or advertisers, and nothing you type into our tools is used to train AI models.
What we collect, and why
Account information. If you create an account, authentication is handled by Clerk. We store your account identifier alongside anything you deliberately save -- saved tool recommendations, saved proposal outlines, your firm's tech stack. You can delete saved items at any time.
Email addresses. If you subscribe to the newsletter, request a report, or ask about services, we store the email you give us and use it for that purpose. We do not rent, sell, or share our list.
Free tool inputs. Our interactive tools -- the proposal generator, workflow audit, AI readiness score, and tool recommendations -- send what you enter to our AI provider (OpenAI, via API) to generate your result. API traffic is not used to train their models. Sensitive free-text you paste, such as RFP text in the proposal generator, is processed to generate your result and is not stored on our servers -- we keep only anonymous metadata (for example firm type, project type, and input length) to understand usage and improve the tools.
Usage analytics. We log page views with a random visitor identifier, the page URL, and the referrer. We use this to see which directory pages and guides are useful. We do not build advertising profiles and we do not use third-party ad trackers.
Payments. If you buy something, payment is processed by Stripe. Card details never touch our servers.
Who processes data on our behalf
We rely on a small set of infrastructure providers, each processing only what their role requires: Clerk (authentication), Supabase (database hosting), Stripe (payments), Resend (transactional email), OpenAI (AI generation via API, no training on API data), and Vercel (hosting). We do not share your data with anyone else, including the software vendors listed in our directory.
What we never do
We never sell your data. We never share your inputs or contact details with tool vendors -- if you want an introduction to a vendor, you make it yourself. We never use what you type into our tools to train AI models. And our editorial independence works the same way: directory listings and recommendations are not paid placements.
Your choices
Every email we send includes an unsubscribe link. Signed-in users can delete saved items from their profile. If you want your account, saved data, or email removed entirely -- or want to know exactly what we hold about you -- email nate@aechub.org and we will handle it promptly.
Changes
If this policy changes in a way that matters, we will update this page and note the date at the top. Questions are welcome at the same address.