Privacy

SBIR Topics matches SBIR/STTR topics to companies. This page says what we keep, why, for how long, and who handles it. Contact: support@figsheet.com.

What we keep

Data	Why	Kept for
The company name or description you submit	To compute your match report	30 days
Your match report	So you can return to its page	30 days
A record that you accepted the Terms: time, terms version, a hash of your IP address	Proof of our agreement	30 days, with the request
A hash of your IP address and a counter	To limit requests a day per address (web form and free API tier)	1 day
A hash of your API key, a counter, and whether Polar accepted the key	To enforce the key's daily limit and avoid checking the key on every call	1 hour for the key check, 1 day for the counter
A click on "weekly matches by email: coming soon" (time and report page only, no email address)	To count interest	Up to 30 days, then kept only as an anonymous count

We do not use cookies, trackers or analytics scripts, and we do not collect email addresses. Visit counts come from our hosting provider's aggregate statistics. Topic and award data on the site come from public SBIR.gov sources; the award records we use carry company names and award details, never the contact or principal investigator names, phones or emails in the public file.

Who handles it

Cloudflare hosts the site and stores the data above. If you buy an API key, Polar (polar.sh) is the merchant of record: it collects your name, email and payment details under its own privacy policy, issues the key and tells us only whether a key is valid when you use it. Our own server reads each request from there to compute the report and keeps only anonymous counts afterwards. We do not sell or share what you submit or use it to train models.

Legal basis and transfers

We process your data to provide the report you ask for (and, for rate limiting and security, our legitimate interest in keeping the service available). The data is processed in the United States and on Cloudflare's network, under its data processing terms. If you are in the EU or UK you may complain to your data protection authority.

Your choices

Write to support@figsheet.com with your report's address to have it deleted early, or to ask what we hold. We act on such requests within 30 days.