Skip to main content

AutoSAM

FeaturesPricingSecurityBlog(Soon)ContactGet started

Do Not Sell My Personal Information

Effective March 21, 2026 · v1.0 · Material changes will be communicated via email to active subscribers.

Our commitment

AutoSAM, operated by GovCertix LLC (“we,” “us,” “our”), does not sell personal information as defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

We also do not share personal information for cross-context behavioral advertising purposes. We do not participate in data-broker networks, real-time bidding, retargeting, or any similar data exchange arrangements. All data sharing is strictly limited to service providers operating under binding contractual obligations to process data only on our behalf and only for the purposes described in this page and our Privacy Policy.

Categories of personal information we collect

Under CCPA/CPRA, the following table describes the categories of personal information AutoSAM collects, examples of each, and the business purpose for collection:

CCPA CategoryExamplesBusiness Purpose
IdentifiersName, email address, account ID, IP addressAccount creation, authentication, communication, security
Commercial informationSubscription tier, billing history, payment method typeBilling, subscription management, revenue reporting
Internet or other electronic network activityUsage logs, feature interactions, session data, page viewsProduct analytics, performance monitoring, support
Professional or employment-related informationCompany name, job title, role (user-provided)Account personalization, team workspace context
Inferences drawn from the aboveCompliance health score, engagement score, usage patternsProduct improvement, feature recommendations, alerting

For more detail on data retention periods, see our Privacy Policy.

How we share personal information

AutoSAM shares personal information only with service providers (subprocessors) who are contractually bound to process data solely on our behalf and only for the purposes of delivering the AutoSAM platform. All sharing is for service delivery only — we do not share personal information for advertising, marketing by third parties, or any purpose unrelated to operating the service.

Service ProviderData SharedPurpose
Supabase Inc.Account data, authentication tokensDatabase hosting and authentication
Stripe Inc.Billing and payment informationPayment processing and subscription management
Vercel Inc.Request logs, IP addressesApplication hosting and CDN
Resend Inc.Email addresses, notification contentTransactional email delivery
PostHog Inc.Usage events, anonymized identifiersProduct analytics (with consent only)
Sentry Inc.Error traces, session identifiersError monitoring and performance diagnostics
Upstash Inc.Rate-limiting counters, cache keysRedis caching and rate limiting

For the full list of subprocessors, their data locations, and privacy policies, see our Subprocessors page.

Sensitive personal information

AutoSAM does not knowingly collect sensitive personal information as defined under CPRA. This includes, but is not limited to: Social Security numbers, driver's license or state ID numbers, financial account numbers with access credentials, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, health data, sexual orientation, or the contents of private communications. If we become aware that sensitive personal information has been inadvertently collected, we will promptly delete it.

Your rights under California law

If you are a California resident, the CCPA/CPRA grants you the following rights regarding your personal information:

  • Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purposes for collecting it, and the categories of third parties with whom we have shared it.
  • Right to Delete — You may request that we delete the personal information we have collected about you, subject to certain exceptions (for example, data required for billing compliance or legal obligations).
  • Right to Correct — You may request that we correct inaccurate personal information that we maintain about you.
  • Right to Opt-Out of Sale / Sharing — You have the right to opt out of the sale or sharing of your personal information. However, this right is not applicable to AutoSAM because we do not sell or share personal information as defined under CCPA/CPRA.
  • Right to Limit Use of Sensitive Personal Information — You have the right to limit the use and disclosure of sensitive personal information. This right is not applicable to AutoSAM because we do not collect sensitive personal information.
  • Right to Non-Discrimination — We will not deny you services, charge you different prices, provide a different level or quality of service, or suggest that you will receive any of these as a result of exercising your privacy rights.

How to submit a request

To exercise any of the rights described above, please email privacy@autosam.io with the subject line “California Privacy Request.” Include your full name and the email address associated with your AutoSAM account so we can locate your records.

  • Response time: We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days of receipt. If we need additional time, we will notify you of a one-time 45-day extension and explain the reason.
  • Identity verification: To protect your privacy, we may need to verify your identity before fulfilling your request. Verification typically involves confirming your email address and account ownership.
  • Authorized agents: You may designate an authorized agent to submit a request on your behalf. The agent must provide a signed, written authorization from you, and we may still require you to verify your identity directly.

Appealing a denied request

If we deny your request in whole or in part, we will explain the basis for the denial. To appeal, email privacy@autosam.io with the subject line “Appeal — California Privacy Request.” We will review your appeal and respond within 45 calendar days. If the appeal is denied, we will provide information on how to contact the California Attorney General to submit a complaint.

California “Shine the Light”

Under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents may request information about whether a business has disclosed personal information to third parties for their direct marketing purposes. AutoSAM does not disclose personal information to third parties for their own direct marketing purposes. California residents may request confirmation of this practice by contacting privacy@autosam.io.

Changes to this page

We may update this page from time to time to reflect changes in our data practices or applicable law. Material updates will be reflected on this page with an updated effective date. Active subscribers will be notified by email of material changes.

If you have questions about this page or want to submit a privacy request, contact privacy@autosam.io.

AutoSAM

SAM.gov Compliance Intelligence

Product

FeaturesPricingSecuritySolutionsCompareTrust CenterBlogChangelogStatus

Legal

LegalTermsPrivacyCookiesDo Not SellAcceptable UseRefund PolicySubprocessorsSLAResponsible DisclosureDMCAEnterpriseAccessibility

508-Compliant

256-bit Encryption

99.9% Uptime

Security-First Design

\u00a9 2026 GovCertix LLC. All rights reserved.

AutoSAM is a software tool — not a CMMC C3PAO, RPO, law firm, CPA firm, or contracting agency. Outputs are informational; you remain the gatekeeper. Read our Terms, Privacy Policy, and AUP.

TermsPrivacy PolicyAUPCookie PolicyTrust Center

Legal docs v1.0.0; last reviewed 2026-05-13.

AutoSAM is not affiliated with, endorsed by, or operated by SAM.gov, the System for Award Management, the General Services Administration (GSA), or the United States government.