Privacy Policy

Last updated: October 11, 2026.

This policy explains how Defense Tech Base handles information when you browse our directories, research public records, use our tools, subscribe to email, take a course, contact us or buy a research download. Contact us at [email protected] or through our contact form.

Information you provide

• Newsletter: email address, selected topics, signup source, signup and confirmation dates, and subscription status. We use confirmation before activating a new subscription.
• Email courses: email address, course, your selected stage, product, goal and delivery pace, enrollment status, lesson progress and delivery records. Private access links and session cookies let you manage your course without a public username and password.
• Contact, listing and sponsorship forms: your name, business/contact details, organization, website, proposed listing information, messages, corrections, sponsorship goals and any budget range you choose to provide. We review submissions, reply, maintain listings and manage requested services.
• Purchases: purchaser name, organization where supplied, email, selected product/edition/license, amount, payment and order identifiers, payment status and delivery/access records. Stripe handles checkout and payment details; our application does not store full payment-card numbers.

Please provide only information needed for your request. Do not submit classified information, controlled unclassified information, export-controlled technical data, credentials, sensitive personal records or confidential proposal/customer material. Our public forms and research tools are not a secure submission channel for that material.

Public business and research information

Our directories and research draw on public organization websites, government records and other identified sources. Records may include business contact information and names appearing in public awards, patents, jobs or other source material. We organize, summarize and match these records to support research. Published profiles may contain reviewed business information you submit; a private inquiry or subscription is not a public listing. Contact us about an inaccurate record or personal information that should be reviewed.

Technical data, cookies and analytics

Hosting and security services may process IP addresses, request URLs, timestamps, browser/device information, referrers and diagnostic logs to deliver and protect the site. We use session and CSRF cookies for form security and private workflows, and an analytics preference cookie when you make that choice. Some anti-abuse controls use a derived IP fingerprint and aggregate event counts.

Google Analytics and Google Tag Manager help us understand page visits, traffic sources, device/browser characteristics and interactions such as filters, resource downloads and completed signup or inquiry actions. URLs and query parameters can reveal search terms or public records you select. Short ordinary glossary searches and result counts may be sent as analytics events. Do not put confidential information into search boxes or URLs. Google may use cookies and process data under its privacy policy.

Turn off site Google analytics in this browser or turn it back on. The opt-out preference lasts up to one year unless you clear it; repeat it on other browsers/devices. It suppresses the site's Google analytics/tag scripts on subsequent page loads but does not undo data already sent, remove existing Google cookies or disable essential security, payment, delivery logs or our aggregate sponsorship measurements. You can also manage cookies and site data through your browser.

Notes and tools saved in your browser

Research shortlists, decision notes, buyer worksheets and proposal matrices can be saved in local browser storage when you select the save action. That saved tool content is not uploaded to our application as a synced account workspace. Clearing the tool's saved copy or your browser's site data removes it from that browser; we cannot recover it for you. Shared shortlist links contain public record identifiers, not private decision notes. Downloaded files may include your notes: review them before sharing. Newsletter popup dismissal can also be remembered locally. Technical services and analytics can still receive the page requests described above.

Email and your private subscriber copy

We use email delivery providers, currently Resend, to send confirmations, requested newsletters, lessons and service messages. They receive recipient information and the message being delivered, and process technical delivery data under their own policies. We store send attempts and delivery, bounce, complaint and suppression statuses to operate reliable email and honor opt-outs. Newsletter and course messages provide unsubscribe controls; course access also lets you manage preferences and progress. Newsletter and course preferences are separate. Stopping marketing or lessons does not prevent a necessary response to a support request or purchase.

The primary subscriber record is in our application database. A restricted Google Sheet is refreshed hourly with subscriber ID, email, domain, status, signup/confirmation dates and source so our team can review signups and domains. It contains no confirmation/access tokens or course records. Subscriber status changes and deletions are reflected in the next successful refresh. Our team may add manual domain-review notes separately. Unsubscribing changes your status; it does not by itself delete every record. We do not make the subscriber Sheet public or provide subscriber email lists to sponsors.

Service providers and other disclosures

We use Render for hosting/database services, Cloudflare for network protection, form verification and encrypted backup storage, Google for analytics, reporting and the restricted subscriber Sheet, Resend for email delivery, and Stripe for payments. Service providers process the information needed for their functions. They may operate outside your country, including in the United States. Our team and authorized service providers can access records as needed to operate and support the service.

We record aggregate listing/placement views, profile and outbound clicks, and inquiry-form starts for directory and sponsorship reporting. Sponsors may receive aggregate performance counts; these are directional measurements, not a list of identified visitors or a guarantee of leads. We do not sell subscriber email lists. We may disclose relevant records to comply with applicable law, respond to valid legal process, investigate abuse, protect rights and security, or handle a business transfer subject to applicable privacy obligations.

AI instructions and external services

Our downloadable AI skills are instructions you choose to run with your own assistant. Downloading a skill does not send your prompts or local files to an AI provider through our site. If you use an external assistant, payment page, job application, organization website or other linked service, that service's terms and privacy practices apply. Public research content may be summarized or assisted by automation; check the cited original sources before relying on it.

Retention, security and requests

We retain information while needed to provide requested services, maintain licenses and transaction records, resolve support issues, prevent abuse and meet applicable obligations. Some records, including opt-out/suppression records and purchase evidence, may need to remain after other information is deleted. Retention varies by record; we do not currently promise a single automatic deletion period for all personal data.

We use access controls, transport security and encrypted recovery backups. No service or transmission is guaranteed secure. Removed records may remain in restricted backups and historical service copies until those copies expire or are replaced; restored data must be reconciled with applicable deletion and opt-out requests. Browser downloads and copies held by others are outside our control.

Email [email protected] to request access, correction or deletion of personal information, or to raise a privacy concern. Tell us the email or record involved without sending sensitive identity documents. We may need proportionate verification. We respond in accordance with applicable law; rights and exceptions depend on your location. You may also contact your local privacy regulator where applicable.

Children and policy changes

The service is intended for a professional audience and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can review it. We will update this page when our practices change and revise the date above. New account or login features will require a fresh review of this policy before launch.

See our Terms of Use and the separate research download terms.