Privacy Policy

Effective Date: August 13, 2026

Application: Government Agentic Bid Engine ("G.A.B.E.", "the App")

Provider: Avinoam Software Corporation ("Avinosoft," "we," "us," or "our")
2804 Sam Houston Dr UNIT 3067, Victoria, Texas 77904
Contact: [email protected]

This Privacy Policy explains what information G.A.B.E. collects, how we use it, who we share it with, and the choices and rights available to you. This policy applies to all users of the App, and it specifically describes how we access, use, store, and share Google user data obtained through Google Sign-In.

By activating or using G.A.B.E., you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the App.

---

1. Who This Policy Applies To

G.A.B.E. is a business-to-business (B2B) tool intended for use by authorized company representatives engaged in government contract procurement. The App is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected such information, we will delete it promptly. This Privacy Policy is written for users located in the United States and describes rights available under U.S. law (see Section 8).

2. Information We Collect

2.1 Information You Provide Directly

When you activate/register for G.A.B.E., we collect:

• Full name of the company representative
• Email address
• Phone number
• Company name (where provided)
• Opt-in confirmation for security authentication, promotional communications, and support requests

2.2 Content You Upload

• Solicitation documents (PDFs) you upload for analysis, and the data extracted from them (e.g., bid due dates, contact information, line items, delivery locations, pricing, and related procurement details you submit or that the App generates as output)

2.3 Google Account Information (via Google Sign-In / OAuth)

When you connect your Google Account, we request the following OAuth scopes:

Scope	Purpose
https://www.googleapis.com/auth/spreadsheets	To create and write rows to a Google Sheet ("G.A.B.E. Pre-Install Submissions") in your own Google Drive, recording your registration and activation data.
https://www.googleapis.com/auth/drive.file	To locate or create that same spreadsheet file within your Drive. This scope only grants access to files the App itself creates or that you explicitly open with the App.

We also receive basic Google profile information (name, email address) provided by Firebase Authentication as part of the standard Google Sign-In flow.

We do not access, read, or modify any other files, folders, emails, or data in your Google Account beyond what is described above. We do not request or use any scope broader than what is listed in the table above.

2.4 Automatically Collected Information

We may collect limited technical information necessary for the App to function, such as authentication tokens (used only for the current session and not persisted beyond what's needed to operate the App) and basic local browser storage (e.g., to remember that you've completed activation) on your own device.

3. How We Use Your Information

We use the information described above to:

• Operate, maintain, and provide the core functionality of G.A.B.E., including ingesting solicitation PDFs, extracting and analyzing bid data, and generating sourcing/pricing reports
• Create and update the Google Sheet in your own Drive with your registration/activation data, via the OAuth scopes above
• Send solicitation PDF content and extracted text to the Google Gemini API for AI-powered analysis (e.g., extracting structured bid data, evaluating line items, generating supplier/market analysis, and drafting procurement/credit correspondence). This processing is performed either using our default system API key or, if you choose to provide your own Gemini API key ("Bring Your Own Key"), using your personal key
• Verify your identity and authenticate you to the App
• Provide customer support and respond to your inquiries
• Send you administrative, security, and — where you have opted in — promotional communications
• Maintain a master record of your submitted bids/records within the App's own database for your account's use
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell your personal information. We do not use Google user data for advertising, and we do not use Google user data to train generalized AI/ML models.

4. Who We Share Your Information With

We share information only as described below. We do not sell your information to third parties.

Recipient	What is shared	Purpose
Google (Firebase Authentication, Google Sheets API, Google Drive API, Google Gemini API)	Google account profile info (name, email) for sign-in; registration data written to a Sheet in your own Drive; document content sent for analysis	Authentication, storage, and AI analysis
GoHighLevel (our CRM/marketing platform)	Full name, email address, phone number, and company name collected at registration	Internal customer relationship management, account/security-related communications, and support
Service providers acting on our behalf	Limited technical/operational data as needed	Hosting, infrastructure, and technical support services necessary to operate the App
Legal/regulatory authorities	Information as required	Where required to comply with applicable law, legal process, or to protect our rights, users, or the public

Each of these recipients is contractually and/or operationally limited to using your information only for the purposes described above, and is prohibited from selling it.

If we are ever involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction; we will notify you of any such change and any choices you may have.

5. Google API Services User Data Policy Disclosure

G.A.B.E.'s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominently visible in the App's user interface (registration record-keeping and, at your direction, AI analysis of documents you upload)
• We do not use Google user data for serving advertisements
• We do not allow humans to read Google user data unless: (a) we have your affirmative agreement for specific messages, (b) it is necessary for security purposes, (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized
• We do not transfer Google user data to any third party except as disclosed in Section 4 and permitted by the Google API Services User Data Policy

6. Data Retention

We retain your personal information and related records for as long as your account/registration remains active and as reasonably necessary to provide the App, support our business purposes (including recordkeeping in our CRM and master database), and comply with legal obligations. We do not have a fixed automatic deletion period — instead, we retain information until you request that it be deleted (see Section 8), at which point we will delete or de-identify it within a reasonable time, except where we are required or permitted by law to retain it longer.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction, including transmitting data over encrypted connections (HTTPS) and using OAuth-based authentication rather than storing your Google password. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal information
• Opt out of promotional communications at any time (e.g., by contacting us or using unsubscribe instructions in our communications)
• Revoke Google account access at any time via your Google Account permissions page, which will disconnect the App's OAuth access to your Google Sheets/Drive

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within a reasonable time as required by applicable law (including, where applicable, the California Consumer Privacy Act and similar U.S. state privacy laws).

9. Third-Party Links and Services

The App may reference or link to third-party websites, manufacturer contacts, or services (for example, supplier/manufacturer information generated as part of market analysis). We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. If we make material changes — including changes to how we use Google user data — we will notify users by updating the "Effective Date" above and, where appropriate, providing additional notice within the App or via email prior to the change taking effect. We encourage you to review this page periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Avinoam Software Corporation
2804 Sam Houston Dr UNIT 3067, Victoria, Texas 77904
Email: [email protected]