Privacy Policy

Brost Co ("we", "us") provides government contracting software operated by BROSTCO HOLDINGS LLC. This policy explains what we collect and how we use it when you visit brostco.com or use the Brost Co application.

Information we collect

• Account details (name, email, password hash, company name).
• Company profile data you enter (UEI, CAGE, NAICS, addresses, certifications).
• Opportunity, subcontractor, communication, document, and bid records you create or that automation creates for your organization.
• Billing information processed by Stripe (we do not store full card numbers).
• Product usage events (page views, CTA clicks, checkout milestones) to improve the service. Anonymous marketing interaction events do not include form values, raw URL query strings, referrers, visitor identifiers or tracking cookies. Recognized campaign labels are kept in this tab’s session storage and attached to interaction and trial-start events to measure which resources help people find BrostCo. Free-tool entries are processed only in your browser and are not uploaded. Browser interaction tracking honors Do Not Track and Global Privacy Control.

How we use information

With your permission, Google Analytics measures public website visits, campaign performance, website interactions, successful trial signups, and verified purchases. It uses analytics cookies and processes device and interaction data. Our custom events exclude names, email addresses, form entries, private workspace records, and raw URL query strings. Purchase events use a hashed transaction reference and the amount confirmed by our payment processor. Advertising storage and advertising personalization are disabled. Google Analytics is not loaded before you select Allow analytics, and tracking honors Do Not Track and Global Privacy Control. Use Analytics preferences to withdraw permission. See how Google uses information from sites that use its services.

With your permission, we also use Microsoft Clarity for heatmaps and masked session recordings to understand navigation and improve usability. This optional service processes interaction, device, and page data and uses analytics cookies. We mask page text and entered content and do not send account identities through Clarity's identification API. Advertising storage is disabled. Clarity is not loaded until you select Allow analytics, and is disabled for Do Not Track or Global Privacy Control. You can withdraw consent through Analytics preferences at any time. See the Microsoft Privacy Statement for Microsoft's data handling practices.

We use your data to provide the Brost Co platform, run automation on your behalf, bill your subscription, secure accounts, and improve reliability. We do not sell customer data.

Organization isolation

Customer organizations are isolated in the application layer. Users only access records belonging to their organization.

Processors

We use subprocessors such as hosting providers, Stripe (payments), email delivery (Google), and model providers when you enable AI-assisted features. Each is bound by contractual data protections appropriate to their role.

Retention

We retain account and operational records while your subscription is active and for a reasonable period afterward for legal, security, and accounting purposes. You may request deletion of your account by contacting us.

Contact

Privacy questions: hello@brostco.com. See also our Terms of Service.