Contracting Intelligence Platform Privacy Notice

Version October 9, 2026. Effective October 9, 2026 upon publication.

1. Product and responsible company

The Contracting Intelligence Platform (CIP) is the business assessment application at https://cip.coaig.com. City of Angels Investment Group, LLC, a California limited liability company (COAIG, we, us, or our), operates CIP and is responsible for the information practices described here. CIP is a product name, not a separate legal entity. COAIG's operator handles privacy and account-deletion requests. Contact CIS@COAIG.com or City of Angels Investment Group, LLC, 72-811 Highway 111 #1066, Palm Desert, CA 92260, United States.

This notice covers CIP accounts, workspaces, assessments, reports, subscriptions and support. Separate COAIG websites, CIS advisory services, mailing lists, the free 15-question Contracting Intelligence Checklist and toolkit purchases may have different notices. Purchasing CIP or receiving service emails does not by itself subscribe you to marketing.

2. Information and sources

We process account email and authentication information; business and opportunity details, assessment inputs, source text and report information you submit; subscription references and status, assessment usage and billing periods; and support correspondence. Information comes from you or your authorized business users, authentication and payment services, and your interactions with CIP. Hosting providers may process IP addresses, request timestamps and error information for operation and security.

Submit only information you have permission to supply and minimize personal information about others. Do not submit classified or controlled unclassified information, export-controlled technical data, government-secure-environment material, or unnecessary highly sensitive personal data. The Terms explain these restrictions.

3. Purposes

We use information to authenticate users, maintain accounts, save and retrieve assessments, calculate results, produce reports, manage subscriptions and allowances, provide support, investigate errors or abuse, and meet applicable legal obligations. We do not obtain a general license for unrelated advertising merely because you submit assessment content.

COAIG does not sell customer information. Internal operational analysis uses account, subscription and assessment-usage information to manage the service. Assessment content and source text are not authorized for unrelated marketing analytics. Our marketing is limited to people who separately opt in; a CIP purchase does not grant marketing permission.

The existing marketing opt-in is the separate optional checkbox on the free 15-question Contracting Intelligence Checklist form. Direct CIP purchase does not currently establish that opt-in. Operational account, billing and support communications are separate from promotional messages. Any additional purchase-path marketing opt-in must be voluntary, separate from purchase and recorded with the wording and time of consent before marketing enrollment.

4. Providers and disclosures

Supabase supplies authentication and database services; Render hosts the application server; Stripe processes Checkout payments, invoices and customer-portal actions; and Zoho Mail supplies authentication-email delivery through SMTP. Payment card details are entered into Stripe-hosted interfaces. CIP stores subscription references and status rather than full payment card numbers.

Providers receive information necessary for their functions. Payment and other providers may also process information for their own legally required or independently determined purposes under their notices. Supabase and Render publish data-processing terms for hosted customer data. Stripe may act as a processor or independently responsible provider depending on the activity. Their public documents do not establish that every account-specific agreement or processing location has been independently audited by COAIG. COAIG also uses Microsoft OneDrive Personal Vault for restricted recovery archives, which may contain account and application records.

Where lawful and necessary, information may be disclosed to respond to legal obligations or valid requests, protect security and legal rights, or complete a bona fide corporate transaction involving CIP, subject to applicable safeguards. These are limited potential disclosure circumstances, not a claim that a transaction or disclosure has occurred.

5. Browser storage, tracking and AI

CIP uses browser storage for sign-in/session handling and caches application files for its installed web-app experience. A selected local workspace stores assessments in the browser; cloud workspaces save assessments to Supabase. Clearing browser data may remove local records. Support cannot necessarily access or delete records stored only on your device; manage those records through your browser and device controls.

Live external AI analysis is disabled for this launch. Before enabling a future external AI feature, we will provide an accurate description of the provider, information transmitted, purpose and available choices, and obtain the feature-specific consent required for it. This notice does not authorize such a future transmission.

The reviewed CIP application does not embed advertising pixels, session recording or cross-site analytics integrations. CIP currently has no application behavior that changes in response to Do Not Track or Global Privacy Control signals. These distinct signals do not disable essential session storage. Stripe-hosted payment pages and provider infrastructure have their own notices and practices; this statement does not describe separate COAIG websites. COAIG does not use the reviewed CIP application to sell personal information or share it for cross-context behavioral advertising. Provider processing remains governed by the service involved; this is not a claim that all provider activity is exempt from privacy law. Contact support to exercise an applicable opt-out.

6. Retention and deletion

Cancellation does not automatically erase assessments or accounts. You may use available deletion controls or request account deletion through support. Deleting an assessment does not erase its allowance usage record or restore the allowance.

Retention depends on the data category, ongoing service needs, legal recordkeeping, security, disputes and your deletion requests. Scheduled account disposal is not currently active. Account and workspace records are kept while needed for service, read/export access, requests, justified recordkeeping or documented holds. Inactive-record review and deletion requests are handled by the operator, rather than by an automatic disposal job. There is no currently guaranteed expiry date for every retained provider or backup copy. A future category-specific schedule will require verified implementation and notice before shortening existing access.

Approved deletion requests apply to records under our control, subject to lawful exceptions. We will explain relevant exceptions and scope when responding. Exported copies held by you or others are outside our control. Local-browser records may require action on your device. Backup copies, if present, are handled under the confirmed retention schedule rather than being represented as immediately erased. Information retained for legal or security reasons will be limited to those purposes.

7. Choices and privacy rights

Use available controls to review and update information and export reports. Send access, correction, deletion or other privacy requests to CIS@COAIG.com. We may verify identity or authority where appropriate and explain any applicable exceptions. Verification will be proportionate to the request; a request does not authorize unrelated use of verification information.

Available rights depend on applicable law and may include access, correction, deletion, portability, certain opt-outs or restrictions, authorized-agent requests, and appeals or regulator complaints. We will honor applicable rights without unlawful discrimination. Email CIS@COAIG.com with the subject CIP Privacy Request. You may request access, correction, deletion, a portable copy, or an applicable opt-out, and use an authorized agent where applicable. To appeal a response, reply with the subject CIP Privacy Appeal; COAIG will review the reason and explain the outcome and any applicable regulator complaint route. We acknowledge requests within five business days as an operating target and track the applicable legal deadline from receipt. Our target response is within 30 days; where a shorter legal deadline applies, that deadline controls. Any lawful extension will be explained. We do not require you to purchase or create an account to make a request. These service commitments do not assert that every state statute applies to every user or to COAIG.

Marketing choices are separate from account security, billing and other necessary service communications. You can withdraw marketing permission through the unsubscribe link in a promotional email or by contacting CIS@COAIG.com. COAIG will retain the minimum suppression information necessary to respect that choice. Buying CIP, requesting account support or correcting a CRM record does not reverse an unsubscribe. COAIG's operator monitors CIS@COAIG.com and handles these requests.

8. Security, children and processing locations

We use access controls and encrypted network connections, but no system is absolutely secure. Keep credentials private and notify support of suspected misuse. These statements do not claim a government authorization, certification or guaranteed prevention of breaches.

CIP is intended for adults using it for business purposes, not children under 18. If you believe a child supplied personal information, contact support so we can investigate and take appropriate action. New enrollments use operator-issued invitations after adult business-use eligibility confirmation. This is not automated age verification. Suspected child accounts are reviewed and restricted as appropriate; the operator determines and records any necessary deletion and legal exceptions.

Initial enrollment is limited to U.S. adult business users through operator-issued invitations; public signup is disabled. Canada and Mexico enrollment is deferred. These controls do not block all overseas website access or automatically determine a user's location. Production Supabase is configured in us-east-1; provider support, subprocessors and other operations may involve other locations under their applicable terms. The selected database region is not a promise that every provider operation occurs in the United States. Provider support, payment processing, email, recovery storage and subprocessors may operate across borders.

9. Changes and contact

We will identify material notice changes with an updated effective date and communicate them as appropriate. New practices requiring consent will be presented for that consent before implementation. Questions and privacy requests: CIS@COAIG.com; City of Angels Investment Group, LLC, 72-811 Highway 111 #1066, Palm Desert, CA 92260, United States. Effective date: October 9, 2026 upon publication; no earlier effective date is asserted..