Who this covers
CRAA is operated by Rambo House. This policy covers the CRAA web application. Membership, sign-in, and billing are provided by Contract Ready through the third-party platform named below, which processes that data under its own privacy policy.
What CRAA does with your documents
- You upload a file. It is received by the server and converted to plain text in memory.
- That text is sent to Google’s Gemini API to identify the application’s questions and requirements, and to propose facts about your organization.
- For opportunities you upload, your confirmed facts and the question wording are sent to the same API to draft answers.
- The results are returned to your browser. The uploaded file itself is not stored on our servers — server-side storage of documents, facts, and profiles is disabled.
Google’s use of that text
CRAA currently uses Google’s free Gemini API tier. Under Google’s terms for unpaid services, content submitted to the API and the responses generated may be used by Google to provide, improve, and develop its products, services, and machine-learning technologies, and may be reviewed by humans.
Do not upload documents you cannot allow to be processed on those terms. Avoid uploading protected health information, personal identification numbers, payment details, or material covered by a confidentiality agreement.
What is stored, and where
| Data | Where it lives | How long |
|---|---|---|
| Business Bucket facts, drafts, approvals, budget notes, document checklist | Your browser’s local storage, on your device | Until you clear it or your browser does |
| Uploaded files and extracted text | Server memory during the request; sent to Google for processing | Not stored by us after the response |
| Sign-in session | An httpOnly cookie set by our membership platform | Until it expires or you sign out |
| Account, membership, and payment details | Uscreen, our membership platform | Per that platform’s policy |
| Standard request logs (IP address, timestamp, path) | Vercel, our hosting provider | Per Vercel’s retention |
Because your working data is held in your browser, clearing your browser data deletes it permanently and it cannot be recovered by us. Equally, anyone with access to your device and browser profile can see it.
Website research
If you supply a website address, CRAA fetches that public page from our server to read its text. Only public HTTPS addresses are permitted; private, internal, and numeric network addresses are blocked.
Processors we rely on
- Google (Gemini API) — reads document text and drafts answers.
- Uscreen — the platform behind Contract Ready accounts, sign-in, membership, and payments.
- Vercel — hosting and request logs.
These providers process data on their own terms and may store it outside your country.
What we do not do
- We do not sell your data.
- We do not use your documents for advertising.
- We do not retain your uploaded files on our servers after processing.
- We do not submit anything to a funder on your behalf.
Your choices
- Clear your working data at any time by clearing site data for this website.
- Sign out to end your session; cancel membership from your account.
- Choose what to upload. CRAA can only process what you give it, and answers can be typed directly instead.
- For questions about data held by our membership platform or Google, contact them directly, or reach us at info@contractready.com and we will help where we can.
Children
CRAA is a business tool and is not directed to children under 16.
Changes
This policy will change as the service does — particularly if the AI provider or its data terms change. The “last updated” date above reflects the current version.