Last updated: July 19, 2026
RFI Know ("RFI Know", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use the RFI Know website, applications, and related services (the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
RFI Know is a cloud-based software platform that helps organizations complete security questionnaires, Requests for Information (RFIs), Requests for Proposal (RFPs), vendor assessments, and similar documentation using artificial intelligence and historical organizational knowledge.
If you have any questions regarding this Privacy Policy, you may contact us at:
This includes information you voluntarily submit, including:
When you register an account we may collect:
Payments are processed by our third-party payment processor (Stripe). RFI Know does not store your complete credit card number. We may receive limited payment information such as:
When you use the Service we may automatically collect:
We and our analytics providers use cookies and similar technologies to keep you logged in, remember preferences, maintain security, prevent fraud, and understand how the Service is used. We use Google Analytics and, where enabled, PostHog for product analytics; these set cookies and collect usage information such as pages visited, device/browser details, and IP address.
You may disable cookies in your browser, although some functionality may no longer operate correctly.
Customer Content includes information uploaded by users, such as security questionnaires, RFIs, RFPs, policies, procedures, knowledge base entries, supporting documents, attachments, comments, and generated answers.
Customer Content remains owned by you or your organization. We process Customer Content solely for the purpose of providing and improving the Service.
We use collected information to:
We do not sell your personal information.
Certain features of RFI Know use artificial intelligence to assist users in preparing questionnaire responses. To provide these features, prompts, uploaded documents, and historical answers may be transmitted to and processed by our third-party AI provider (OpenAI) as necessary to generate the requested responses.
Users remain solely responsible for reviewing all AI-generated output before relying upon or submitting it.
RFI Know does not use Customer Content to train its own general-purpose AI models without your consent.
Depending on your location, we process information based upon one or more of the following legal grounds:
We share information with trusted service providers who help us operate the Service. They receive only the information reasonably necessary to perform services on our behalf and are required to maintain appropriate safeguards. Our current providers include:
This list may be updated from time to time as our providers change.
We may disclose information if required to:
If RFI Know is involved in a merger, acquisition, financing, sale of assets, or similar corporate transaction, customer information may be transferred as part of that transaction. Any successor entity will remain subject to this Privacy Policy unless users are notified otherwise.
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These safeguards may include:
However, no method of transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.
We retain personal information and Customer Content for as long as your account is active and as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
If your paid subscription is canceled, we retain your account data and Customer Content for twelve (12) months so you can resubscribe and pick up where you left off. If you do not resubscribe within that period, your data is permanently deleted from our production systems. We will email the account owner before deletion occurs.
You may also delete your account at any time from Settings, which deletes your account data and uploaded files (including files held in our object storage). Information may remain in encrypted backups for a limited period before being overwritten. Where required by law, we may retain certain information for longer.
Your information may be processed in countries other than your own, which may have privacy laws that differ from those of your jurisdiction. Where appropriate, we take reasonable steps to protect information transferred internationally.
Depending on your location, you may have the right to:
Account owners and admins can delete their organization and its data directly from Settings. To exercise any other right, contact us at [email protected].
The Service is intended for business users. It is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected such information, we will take reasonable steps to delete it.
The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Users should review the privacy policies of third-party services independently.
We may update this Privacy Policy from time to time. If material changes are made, we will provide notice by posting the revised Privacy Policy on our website or through the Service. Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us: