Privacy Policy

Belleau Labs, Inc. is a Delaware corporation. The Service includes the belleau.io website and the Atlas platform. This Policy applies to information we process about visitors, account holders, and users in the course of operating the Service.

We collect the following categories of information:

• Account and identity information you provide — such as your name, email address, and the credentials and profile details managed through our authentication provider when you create or use an account.
• Business and profile information you enter — such as your organization, capabilities, NAICS/PSC codes, searches, watchlists, and other inputs you provide to use the Service.
• Payment information — when you purchase a paid plan, our third-party payment processor collects and processes your payment details. We do not store full payment-card numbers.
• Usage and device information collected automatically — such as the pages and features you use, queries you run, your IP address, browser and device type, and similar log data.
• Cookies and similar technologies — used for authentication, security, preferences, and analytics (see "Cookies" below).
• Information from third parties and public sources — including our service providers and the publicly available government and commercial data that powers the Service. This source data is generally about companies, agencies, and awards rather than your personal information.

We use strictly necessary cookies (for sign-in, session, and security) and analytics and performance cookies to understand and improve the Service. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service from working.

We use information to:

• Provide, operate, maintain, and secure the Service;
• Authenticate you and manage your account;
• Process payments and manage subscriptions;
• Respond to your requests and send you service and administrative messages;
• Analyze, improve, and develop the Service and new features;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers and subprocessors that perform services on our behalf under contractual confidentiality and data-protection obligations (see below);
• Legal and safety reasons — to comply with law, respond to lawful requests, or protect the rights, property, and safety of Belleau Labs, our users, or others;
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy; and
• With your consent or at your direction.

We rely on reputable third parties to run the Service. These may include providers for cloud hosting and infrastructure, database and file storage, authentication, payment processing, analytics and error monitoring, rate-limiting, and AI model processing — for example, Vercel (hosting), Supabase and Cloudflare (database and storage), Clerk (authentication), Stripe (payments), and large-language-model providers used to generate analyses and summaries.

Where the Service uses AI to generate summaries, scores, or analyses, certain inputs may be processed by third-party model providers. We seek providers that contractually limit the use of submitted data and do not use it to train their public models, but you should not submit information you do not wish to be processed in this way.

We retain personal information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

We use reasonable technical and organizational measures designed to protect information, including encryption in transit and access controls. No system is completely secure, however, and we cannot guarantee absolute security.

Depending on where you live, you may have rights regarding your personal information — including the right to access or know, correct, delete, and obtain a copy of it, and to opt out of the sale or sharing of personal information or of targeted advertising. As noted above, we do not sell or share your personal information. We will not discriminate against you for exercising these rights.

To exercise your rights, email privacy@belleau.io. We may need to verify your identity before responding, and you may use an authorized agent where permitted by law. If we deny your request, you may appeal by replying to our response.

California residents may also request information about disclosures of personal information to third parties for those parties' direct-marketing purposes; we do not make such disclosures.

We operate the Service from the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

The Service may link to or integrate third-party websites and services that we do not control. This Policy does not apply to them, and we are not responsible for their practices. Please review their policies.

We may update this Policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

Questions or requests about this Policy or your information? Contact Belleau Labs, Inc. at privacy@belleau.io.