Privacy Policy

TeamingIndex.com (“TeamingIndex”, “we”, “us”) is owned and operated by HILARTECH, LLC. This policy explains what information we collect when you use TeamingIndex.com, its REST API and its MCP server, and how we use, share and protect it.

TeamingIndex is a business-to-business directory for federal, defense and aerospace contracting. It is intended for people acting on behalf of companies and other organizations.

Most of the directory is built from public U.S. government data about businesses:

• SAM.gov Entity Management API: UEI and CAGE codes, legal and DBA names, physical location (city, state, ZIP code and congressional district), NAICS and PSC codes, size and socio-economic status, corporate hierarchy, registration dates and exclusion status.
• USAspending.gov: prime contract awards as reported by agencies to FPDS, including amounts, agencies and periods of performance.
• SAM.gov Contract Opportunities: public solicitations and notices.

This is information about businesses. We do not import individual points of contact from SAM.gov. To correct a federal fact, update it at its source (for example your SAM.gov registration); the change appears after our next sync.

• Account details: your work email address (required to sign in) and, if you add them, your name and job title. We record the organization you belong to, your role and when you last signed in.
• Claim reviews: when your email domain does not match your company’s SAM.gov website, we ask for your name and a short explanation of your role, and optionally your job title and phone number, so we can review the claim manually.
• Company profile content: capabilities, differentiators, technical tags, contract vehicles, teaming preferences and a business-development contact (name, title, email and phone). Contact email and phone are shown only to signed-in users.
• Compliance metadata: CMMC level and dates, SPRS assessment details, facility clearance level, export-control registrations, certifications, and the records of our verification reviews. Your exact SPRS score stays private unless you choose to publish it.
• Activity in the product: teaming and NDA requests, Teaming Board posts and pitches, Team Builder workspaces, saved searches and alert settings, AI analyses you run and save, API keys (stored only as hashes) and usage counts, and in-app notifications.
• Messages you send us, such as support, security or accessibility reports.

Please do not submit Controlled Unclassified Information (CUI), classified information or export-controlled technical data. Text containing those markings is rejected before it is saved.

• Server logs: like most websites, our web server records requests (IP address, date and time, page requested, referring page and browser user agent) to keep the service secure and to diagnose problems.
• Abuse prevention: sign-in, claims, teaming requests and the API are rate-limited. Rate-limit counters are short-lived and use one-way fingerprints of email and IP addresses rather than the addresses themselves.
• No tracking: we do not use third-party analytics, advertising pixels or cross-site tracking.

TeamingIndex sets two first-party cookies, both only after you sign in:

• ti_session keeps you signed in. It is HttpOnly, Secure and SameSite=Lax and holds a random token; we store only a hash of it. It lasts 30 days by default, is renewed while you use the site, and is removed when you sign out.
• ti_hint holds the value “1” so pages can show “Dashboard” instead of “Sign in”. It contains no personal information and expires with your session.

Your browser’s local storage also remembers a few display choices, such as a dismissed site announcement or the items you ticked on a knowledge-base checklist. That information stays in your browser and is not sent to us.

We do not use advertising, analytics or third-party cookies. Because we only use what is needed to run the service, there is no cookie banner.

• To operate the directory, search, company profiles, machine-readable profile data, the API and the MCP server.
• To sign you in by email and keep your account secure.
• To review claims and verify compliance credentials.
• To send the notifications and alerts you set up, and to answer your messages.
• To run the AI analyses you request.
• To prevent abuse, enforce our terms and meet legal obligations.

We do not sell or rent personal information, and we do not use it for advertising.

We email sign-in links (each expires after 20 minutes and works once), claim and verification updates, teaming and Teaming Board notifications, and the saved-search and RFP alerts you choose. You can change or turn off alert emails in your dashboard. We do not share your email address with third parties for their marketing.

The AI analyst uses Claude, provided by Anthropic, PBC, which processes these requests as our subprocessor. When you run an analysis, we send Anthropic the platform data the task needs (public-safe profile facts, match results, and award and solicitation facts) and any text you paste.

• Pasted text is screened for CUI, classification and export-control markings before it is sent.
• Private SPRS scores are never included.
• Results are saved to your organization’s Intelligence Hub, where the author or an organization administrator can delete them.
• If your Enterprise organization connects its own Anthropic API key, those requests run under your organization’s own agreement with Anthropic.

See how the AI analyst handles your data.

• Publicly, by design: company profiles are public on the web and through our JSON-LD, Markdown twins, REST API, MCP server and llms.txt, so people and AI tools can discover your company. Contact email and phone, exact SPRS scores (unless published) and CMMC certificate IDs are not public.
• With other members, as you direct: teaming requests, pitches and board posts share what you include. After a mutual NDA is recorded, the counterparty can see your exact SPRS score and CMMC certificate ID.
• Service providers: the provider of our dedicated server in the United States, any email delivery service we use, and Anthropic for AI analyses, each limited to what is needed to provide the service.
• Legal and safety: when required by law, or to protect the rights, property or safety of our users, the public or HILARTECH, LLC.
• Business transfers: if HILARTECH, LLC is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

• Federal source data is refreshed on every sync.
• Account and profile information is kept while your account or your organization’s profile is active. When you ask us to delete your account, we delete or de-identify your personal information unless we must keep it for security, legal or audit reasons.
• Sign-in links stop working after 20 minutes or once used, and sessions stop working when they expire or when you sign out.
• Saved AI reports stay until their author or an organization administrator deletes them.
• Records of security-relevant actions (the audit log) are kept for security and compliance purposes.
• Database backups are kept for 14 days and then deleted on a rolling basis.

We protect information with the measures described on our Security page, including HTTPS encryption in transit, hashed tokens and API keys, encrypted integration keys, audit logging and a strict Zero-CUI policy. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

• Update your account and company profile in your dashboard, including whether your exact SPRS score is public.
• Change or turn off alert emails.
• Ask for a copy of, a correction to, or deletion of your personal information by emailing privacy@teamingindex.com. We will confirm the request comes from you before acting on it.
• Facts that come from SAM.gov or USAspending must be corrected at their source.

Depending on where you live, you may have additional rights under privacy laws; contact us to exercise them.

TeamingIndex is a business service for adults acting on behalf of organizations. It is not directed to children, and we do not knowingly collect personal information from children.

TeamingIndex is operated from and hosted in the United States. If you use it from elsewhere, your information is processed in the United States.

We will post any changes on this page and update the date above. For material changes we will also notify account holders by email or in the product.

Privacy questions and requests: privacy@teamingindex.com. Security reports: security@teamingindex.com. TeamingIndex.com is operated by HILARTECH, LLC.