Terms of Service

Effective date: September 28, 2026
Last updated: September 28, 2026

These Terms of Service (the "Terms") are an agreement between Shannon Cyber Services, LLC, a Texas limited liability company whose postal address is in Section 18 ("we", "us", "our"), and the organization that signs up for or uses RFP Monitor (the "Customer", "you", "your"). They govern your use of the Service.

If you accept these Terms for an organization, you confirm that you have authority to bind that organization. If you do not have that authority, or do not agree to these Terms, do not use the Service.

1. Definitions

"Service" means RFP Monitor: the web application, the API, the MCP server, and related documentation and support that we provide.
"Public Data" means government solicitation data that a government body has made publicly available, such as notices, amendments, attachments, dates and contact details from SAM.gov and from state, county and city procurement portals, as collected and indexed by the Service.
"Customer Data" means data that you or your Users submit to the Service. It includes your team's search-context profile, your search queries, issue reports, and the details of your Users' accounts. Customer Data does not include Public Data.
"User" means a person you allow to use the Service under your account, such as an employee or contractor who is a member of your team.
"Team" means your organization's workspace in the Service. Each Team has its own members, roles and data.
"Output" means results the Service generates for you, including search results and text produced by AI features.
"Order Form" means any order, quote or online checkout that you and we agree to and that refers to these Terms.

2. The Service

2.1 What it does. The Service collects public government solicitation data, indexes it, and lets your Team search it, including through natural-language search and through AI assistants that connect over the Model Context Protocol (MCP).

2.2 Public Data is provided as-is. We collect Public Data from government sources and do not create it. It may be incomplete, out of date, or wrong, and a source may change or withdraw a posting at any time. Before you rely on Public Data, for example to decide whether to bid, check it against the official source. The official source always governs, including for deadlines, amendments and submission instructions.

2.3 No government affiliation. We are not affiliated with, endorsed by, or acting for any government agency, including the U.S. General Services Administration or SAM.gov. The Service does not submit bids or proposals and is not an official procurement system.

2.4 Changes to the Service. We may change, add or remove features. If a change materially reduces the core functionality of a paid subscription during its term, we will tell you at least 30 days in advance.

3.1 Accounts. Each User needs their own account and must be at least 18 years old. Accounts are for business use only. You must give accurate information and keep it up to date.

3.2 Team administrators. A Team's administrators can invite and remove members, change roles, and set up single sign-on (SSO), domain verification and directory sync for the Team. You are responsible for who your administrators admit, and for removing Users who should no longer have access. A Team may have up to the number of seats included in its plan, as shown on our pricing page or in your Order Form. Members and pending invitations each count as a seat.

3.3 Credentials. Keep sign-in methods, passkeys, SSO configuration and API or MCP tokens secure. Do not share accounts. Tell us promptly at support@shannoncyber.ai if you believe an account or token has been compromised.

3.4 Responsibility for Users. You are responsible for your Users' use of the Service and for their compliance with these Terms.

4. Acceptable use

4.1 Prohibited data. The Service is built to index public information. It is not designed, assessed or authorized to store or process controlled or classified information. You must not upload, enter, submit or transmit any of the following to the Service by any means. That includes search queries, Team profiles, issue reports, file uploads, integrations and MCP clients.

(a) Controlled Unclassified Information (CUI) as defined in 32 C.F.R. Part 2002 and the CUI Registry, including Covered Defense Information;

(b) classified information at any level, or information marked as classified;

(c) export-controlled information, including technical data or defense services subject to the International Traffic in Arms Regulations (22 C.F.R. Parts 120–130), and technology or software subject to the Export Administration Regulations (15 C.F.R. Parts 730–774) that is classified under an Export Control Classification Number other than EAR99;

(d) any other information that a law, regulation or contract (including a government contract) requires to be handled only in a system with specific security controls, such as those in NIST SP 800-171, DFARS 252.204-7012, CMMC or FedRAMP; and

(e) sensitive personal information: government identification numbers, financial account numbers, health information, or other special categories of personal data.

The Service does not hold a FedRAMP authorization and has not been assessed against NIST SP 800-171 or CMMC. Do not use it to meet those requirements.

If prohibited data is submitted to the Service, tell us at support@shannoncyber.ai as soon as you become aware of it. We may delete it, and may suspend affected access while we do. You remain responsible for any obligations that arise from submitting it, including reporting obligations under your own contracts.

4.2 Prohibited conduct. You must not, and must not help anyone else to:

(a) use the Service in violation of any law, including procurement integrity, anti-bribery, antitrust (for example, sharing information to rig bids), sanctions and export control laws;

(b) access or try to access another Team's data, or get around authentication, access controls, rate limits or usage limits;

(c) probe, scan or test the Service for vulnerabilities, except as allowed by our vulnerability disclosure policy on the security page;

(d) interfere with or disrupt the Service or the systems of our providers, including by sending malware or excessive automated traffic;

(e) scrape, crawl or bulk-download the Service or its index, or use it to build a competing product or dataset, except through the API or MCP features within the limits we publish;

(f) resell, sublicense or provide the Service to third parties, except to your own Users, unless your Order Form allows it;

(g) reverse engineer or decompile the Service, except where the law allows it despite this restriction;

(h) impersonate any person, or misrepresent your affiliation with any person or government body; or

(i) use Output to mislead anyone about where information came from, including by presenting Public Data as an official government record.

4.3 Enforcement. We may investigate suspected violations of this Section 4 and may suspend access under Section 12.

5. Customer Data

5.1 Ownership. As between you and us, you own Customer Data.

5.2 Our use of Customer Data. You grant us a worldwide, non-exclusive, royalty-free license to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the Service, to prevent abuse, and to comply with law. We do not sell Customer Data. We do not use Customer Data to train AI models. Section 6 explains how our AI features handle data.

5.3 Your responsibilities. You are responsible for the accuracy and legality of Customer Data, and for having the rights and consents needed to submit it.

5.4 Privacy. Our Privacy Policy describes how we handle personal information. When we process personal information in Customer Data on your behalf, our Data Processing Addendum applies. It is available on request from support@shannoncyber.ai.

5.5 Subprocessors. We use third-party service providers to operate the Service. Our current list is in Subprocessors. We will give notice of new subprocessors as that page describes.

5.6 Aggregated data. We may use data about how the Service is used (for example, counts of searches or feature usage) to operate and improve the Service, provided that it does not identify you, your Users, or the content of Customer Data.

6. AI features

6.1 How they work. Some features use large language models to interpret natural-language search requests, to reformat solicitation text, and to extract solicitation details from public web pages. To do this, we send the relevant input (for example, your search request and your Team's search-context profile, or the text of a public solicitation) to OpenRouter. OpenRouter routes it to the model provider listed in Subprocessors.

6.2 Check Output before you rely on it. AI Output can be incomplete, inaccurate or out of date, even when it looks authoritative. Review it and verify it against the official source before you use it to make business, legal or bid decisions.

6.3 Ownership of Output. As between you and us, you may use Output for your internal business purposes. Public Data that appears in Output remains subject to Section 7.

7. Public Data and third-party content

7.1 Collection. We collect Public Data from public government websites and public APIs. Our crawler identifies itself and gives a contact address. We do not sign in to access-restricted portals to collect data. Attachments are stored as the source published them.

7.2 Rights in Public Data. Your use of Public Data remains subject to any terms that the original source applies. We do not grant any rights in Public Data beyond those the source grants.

7.3 Removal requests. If you believe Public Data in the Service should not be there, contact support@shannoncyber.ai and identify the item. Examples include a document marked as CUI or classified that was published in error, personal information that should be removed, or material that infringes your rights. We will review the request and may remove or restrict the item.

7.4 Third-party services. You may connect the Service to third-party products, such as your identity provider or an AI assistant that uses our MCP server. Your use of those products is governed by their own terms. We are not responsible for them, or for what they do with data they receive from the Service at your direction.

8. Fees and payment

8.1 Fees. You will pay the fees for your plan and seats as stated in your Order Form or on our pricing page at the time of purchase. Unless an Order Form says otherwise, fees are billed in advance for each subscription term through our payment processor, are charged in U.S. dollars (USD), and are non-refundable except as these Terms or applicable law require.

8.2 Payment processing. Payments are processed by our payment processor, Stripe (see Subprocessors). We do not store full payment card numbers.

8.3 Taxes. Fees do not include taxes. You are responsible for all taxes related to your purchase, except taxes on our net income.

8.4 Late payment. If an undisputed payment is overdue, we will tell you. If it is still unpaid 30 days after that notice, we may suspend the Service until it is paid.

8.5 Free and trial use. Free, trial or beta features are provided as-is. We may change or end them at any time, and Sections 14.2 and 15 apply to them to the fullest extent the law allows.

9. Confidentiality

9.1 Each party may receive non-public information from the other that is marked confidential or that a reasonable person would understand to be confidential ("Confidential Information"). Customer Data is your Confidential Information. Public Data is not Confidential Information.

9.2 The receiving party will use the other party's Confidential Information only to perform under these Terms. It will protect that information with at least reasonable care, and will share it only with employees, contractors and service providers who need to know it and are bound by duties of confidentiality at least as protective as this Section.

9.3 These obligations do not apply to information that is or becomes public without the receiving party's fault; that the receiving party already knew, or developed independently; or that it received lawfully from a third party. A party may disclose Confidential Information when the law requires it. Where the law allows, it will give the other party prompt notice first.

10. Security

We maintain administrative, technical and physical safeguards designed to protect Customer Data. They are described on our security page. If we confirm a security incident that affects your Customer Data, we will notify you without undue delay, and in any case within 72 hours after we confirm it.

11. Intellectual property and feedback

11.1 We and our licensors own the Service and all related intellectual property. These Terms do not transfer any of it to you. Subject to these Terms and payment of applicable fees, we grant you a non-exclusive, non-transferable right for your Users to use the Service during your subscription for your internal business purposes.

11.2 If you give us feedback or suggestions, we may use them without restriction or obligation to you.

12. Suspension

We may suspend access to the Service, in whole or in part, if we reasonably believe that:

(a) your use violates Section 4;

(b) your use poses a security risk to the Service, to us, or to other customers; or

Where practical, we will give you notice first and limit the suspension to what is necessary. We will restore access once the cause is resolved.

13. Term and termination

13.1 Term. These Terms apply from when you first accept them until all subscriptions end. Each subscription runs for the term shown at checkout or in your Order Form (monthly or annual). It renews automatically for another term of the same length unless it is cancelled before the end of the current term. Cancellation takes effect at the end of the current term. We will give you at least 30 days' notice of a price change, and the new price applies from your next renewal.

13.2 Termination for breach. Either party may terminate if the other materially breaches these Terms and does not cure the breach within 30 days after written notice.

13.3 Effect of termination. When termination takes effect, your right to use the Service ends. For 30 days after termination, you may ask us to export your Customer Data. We will delete Customer Data within 30 days after that export period ends, as our Privacy Policy describes, except for copies in database backups, which expire within 30 days, and records the law requires us to keep.

13.4 Survival. Sections 5.6, 6.3, 7.2, 9, 11, 13.3, 14, 15, 16 and 17 survive termination.

14. Warranties and disclaimers

14.1 Mutual. Each party represents that it has the authority to enter into these Terms.

14.2 Disclaimer. EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE, PUBLIC DATA AND OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT THE LAW ALLOWS, WE DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT AND ACCURACY. WE DO NOT WARRANT THAT PUBLIC DATA OR OUTPUT IS COMPLETE, CURRENT OR ERROR-FREE, OR THAT THE SERVICE WILL IDENTIFY EVERY RELEVANT SOLICITATION.

15. Limitation of liability

15.1 Exclusion of indirect damages. TO THE FULLEST EXTENT THE LAW ALLOWS, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES. THIS INCLUDES LOST PROFITS, LOST REVENUE AND LOST CONTRACT OPPORTUNITIES, EVEN IF THE PARTY WAS ADVISED THAT THEY WERE POSSIBLE.

15.2 Cap. TO THE FULLEST EXTENT THE LAW ALLOWS, EACH PARTY'S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE FEES PAID OR PAYABLE BY YOU FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

15.3 Exceptions. Section 15.2 does not limit:

(a) a party's obligations under Section 16 (Indemnification);

(b) a party's liability for breach of Section 9 (Confidentiality);

(d) your obligation to pay the fees due under these Terms.

16. Indemnification

16.1 By us. We will defend you against any claim by a third party alleging that the Service, as we provide it to you, infringes a United States patent, copyright or trademark, or misappropriates a trade secret. We will pay the damages and costs finally awarded against you, or agreed by us in a settlement, for that claim. We have no obligation under this Section 16.1 for a claim to the extent it arises from:

(a) Customer Data, Public Data or other content that we did not create;

(b) the combination of the Service with products, services, data or processes that we did not provide;

(d) use of the Service in breach of these Terms.

If the Service becomes, or we reasonably believe it may become, the subject of such a claim, we may get you the right to keep using it, or modify it so that it no longer infringes. If neither is commercially reasonable, we may end the affected subscription and refund the prepaid fees for the rest of its term.

16.2 By you. You will defend us against third-party claims, and pay resulting damages and costs awarded or agreed in settlement, to the extent the claims arise from Customer Data or from your breach of Section 4.

16.3 Process. The party seeking a defense under this Section 16 must:

(a) give the other party (the "indemnifying party") prompt written notice of the claim. A delay relieves the indemnifying party of its obligations only to the extent the delay prejudices it;

(b) give the indemnifying party sole control of the defense and settlement of the claim. The indemnifying party may not settle a claim in a way that admits fault by the other party, or imposes an obligation on it other than a payment the indemnifying party makes, without the other party's written consent; and

The other party may take part in the defense with its own counsel, at its own expense.

16.4 Order of precedence. If these Terms conflict with an Order Form, the Order Form governs for that order.

17. General

17.1 Export control and sanctions. You must comply with all applicable export control and sanctions laws in using the Service. You must not use or access the Service from a country or region subject to comprehensive U.S. sanctions, and must not use it if you are on a U.S. government restricted-party list.

17.2 Government customers. The Service is "commercial computer software" and "commercial computer software documentation" as those terms are used in FAR 12.212 and DFARS 227.7202. A U.S. government customer receives only the rights set out in these Terms. If a term is inconsistent with federal law applicable to a government customer, that term applies only to the extent the law permits.

17.3 Governing law and venue. These Terms are governed by the laws of the State of Texas, without regard to its conflict-of-laws rules. The state and federal courts located in Travis County, Texas (for federal courts, the United States District Court for the Western District of Texas, Austin Division) have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Service, and each party consents to personal jurisdiction in those courts.

17.4 Changes to these Terms. We may update these Terms. We will give at least 30 days' notice of material changes by email to your Team's owners, in the Service, or both. The updated Terms apply from the start of your next subscription term, or earlier if you accept them. Continuing to use the Service after the change takes effect counts as acceptance.

17.5 Assignment. Neither party may assign these Terms without the other's written consent. Either party may assign them without consent to a successor in a merger, acquisition or sale of substantially all of its relevant assets.

17.6 Notices. Send notices to us by email to support@shannoncyber.ai and by mail to the postal address in Section 18. We will send notices to the email addresses of your Team's owners and administrators.

17.7 Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control. This does not excuse payment obligations.

17.8 Entire agreement. These Terms, any Order Form and the documents they refer to are the entire agreement between the parties about the Service. They replace any earlier agreement on the same subject.

17.9 Severability and waiver. If any provision is unenforceable, the rest remains in effect. A failure to enforce a provision is not a waiver.

17.10 Independent parties. The parties are independent contractors. These Terms do not create a partnership, agency or employment relationship.

18. Contact

Shannon Cyber Services, LLC
ATTN: Shannon Cyber Services
1606 Headway Circle STE 9318
Austin, TX 78754
United States

Email: support@shannoncyber.ai