PRIVACY POLICY FASS Flow — Solicitation Capture (Chrome Extension) Effective: August 19, 2026 WHAT THIS EXTENSION DOES FASS Flow — Solicitation Capture is a browser extension that helps users capture government solicitation details (such as RFx name, BPM ID, commodity code, round number, and deadline) from procurement portal pages they are actively viewing, and sends that information into their FASS Flow account. WHAT DATA WE COLLECT Website content. When you click the extension while viewing a supported procurement portal page, it reads solicitation-related text from that page — such as RFx name, BPM ID, commodity, round number, and deadline — so it can be captured into your FASS Flow inbox. We do NOT collect: - Personally identifiable information (name, address, age, etc.) - Health information - Financial or payment information - Your authentication credentials (passwords, PINs, security questions) - Personal communications (emails, texts, chats) - Location data - Browsing / web history - User activity such as clicks, mouse movement, or keystrokes HOW WE USE THE DATA Solicitation details captured by the extension are sent directly to your FASS Flow account via our API and stored in your FASS Flow solicitation inbox. This data is used solely to fulfill the extension's single purpose: getting solicitation information into FASS Flow without manual re-entry. LOCAL STORAGE The extension stores your FASS Flow ingest key (an API credential tied to your account) locally in your browser, along with a cache of the most recently captured solicitation, so the popup can display capture status without requiring you to re-authenticate on every use. This key is not shared with any third party. DATA SHARING We do not sell or transfer your data to third parties, outside of the approved use cases described in the Chrome Web Store Developer Program Policies (https://developer.chrome.com/docs/webstore/program-policies/). Data is transmitted only to FASS Flow's own backend to fulfill the extension's single purpose. DATA RETENTION Captured solicitation data is retained in your FASS Flow account for as long as your account remains active, consistent with FASS Flow's standard data retention practices. You may request deletion of your account and associated data at any time by contacting us. CHANGES TO THIS POLICY If this policy changes, the updated version will be posted at this same URL with a new effective date. CONTACT Questions about this policy can be sent to admin@fass.systems. — FASS Flow · fass.systems