This policy governs the MuniVendor website and eProcurement platform provided by MuniVendor Corporation. MuniVendor Corporation is referred to in this policy as “MuniVendor,” “we,” “us” or “our.”
This Privacy Policy explains how MuniVendor collects, uses, discloses, protects and retains information through munivendor.com, app.munivendor.com, related emails and MuniVendor services.
This Policy applies to website visitors, Agency users, Offeror users, invited users and people who communicate with MuniVendor.
1. Information we collect
A. Public website and contact information
When someone submits a contact or demonstration request, MuniVendor may collect:
- Government Agency or organization name
- Name
- Telephone number
- Work email address
- Message or description of how MuniVendor can help
- Communications and follow-up history
B. Account and identity information
MuniVendor may collect:
- First and last name
- Work email address
- Optional username
- Account type
- Organization affiliation
- Organization role
- Email-verification status
- Invitation and membership status
- Authentication-provider identifiers
- Profile photograph if supplied by an authentication provider
- Account creation, login and security-event timestamps
Passwords are handled by the authentication system in protected form. MuniVendor does not store readable passwords.
C. Google authentication
If a user chooses Google sign-in, Google may provide the information authorized on its consent screen, such as name, email address, profile image and a provider-specific account identifier.
MuniVendor uses that information to authenticate the user, associate the user with the correct account and Organization, and protect account access.
MuniVendor does not receive the user’s Google password.
D. Multifactor authentication and account security
MuniVendor may process:
- Authenticator enrollment status
- Protected authenticator-factor information
- Primary and backup authenticator labels
- Successful and failed authentication events
- MFA setup and removal events
- Recovery-support requests
- Session and device-security information
MuniVendor does not currently use SMS authentication.
E. Agency information
Agency profiles and enrollment workflows may include:
- Agency legal and display name
- Agency type
- Physical and mailing addresses
- Main telephone number
- General email address
- Website
- Approved email domains
- Verified Agency signup authorization
- Purchasing Agent information
- Qualified Purchasing Agent status and information
- QPA certification number and expiration date
- Purchasing Designee information
- Legal, clerk and other designated contacts
- Decision makers
- Notification preferences
- Organization Owners and Account Users
- Invitation, join-request and membership history
F. Offeror information
Offeror profiles may include:
- Legal business name and trade name
- Entity type
- Business address
- Telephone number, email address and website
- State and date of formation
- Business and procurement categories
- Ownership and stockholder information
- Public-company status and SEC filing link
- Contract-performance history
- Liens, litigation and related explanations
- Authorizing-official information
- Signature consent and electronic signatures
- Compliance questions and certifications
- Russia and Belarus disclosure information
- Iran-related certification information
- Business Registration Certificate
- W-9 and other tax forms
- Other qualification and compliance documents
Some profile answers are conditional. Answers that are temporarily hidden because another answer changes may remain stored so they can be restored and used when relevant.
G. Tax IDs and Social Security numbers
An Offeror may provide an Employer Identification Number, other federal taxpayer identification number, or Social Security number when an individual uses an SSN as the business tax identifier.
These identifiers are sensitive information. They are used to:
- Verify and distinguish Offeror Organizations.
- Prevent duplicate Organizations.
- Prevent repeated promotional-credit grants.
- Support tax, procurement and compliance workflows.
- Investigate fraud or correct an identifier after documented review.
The complete identifier is protected and displayed only in masked form after it is saved. MuniVendor may retain a separate one-way reference that cannot reasonably be used to reveal the original identifier but can identify attempted duplicate registration.
If an Offeror requests a correction, MuniVendor may collect official IRS or other supporting documentation. Access to the complete identifier and supporting documentation is limited to authorized systems and personnel with a legitimate need.
H. Procurement information
MuniVendor may process:
- Solicitation drafts and published solicitations
- Specifications, forms and supporting documents
- Publication, amendment, closing and opening timestamps
- Questions, answers, notices and addenda
- Offeror response drafts
- Submitted responses
- Pricing and cost proposals
- Required forms and certifications
- Electronic signatures and notarization records
- File names, file types, sizes, hashes and upload timestamps
- Validation results and completion status
- Evaluations, opening records, award information and contracts
- Audit history showing relevant user and system actions
I. Payments, credits and billing
MuniVendor may collect:
- Billing name and contact details
- Package or credit purchase
- Credit balance and ledger history
- Transaction amount, date, status and reference number
- Payment-processor customer and payment-method tokens
- Limited payment-method information, such as brand and last four digits
- Refund, dispute and payment-failure information
Card and bank-account fields may appear inside MuniVendor while being securely provided to the payment processor.
MuniVendor does not receive or store complete card numbers, card security codes or complete bank-account numbers unless the policy and security design are expressly changed.
J. Invitations and communications
MuniVendor may process:
- Invited email address
- Inviting Organization and assigned role
- Invitation creation, send, resend, expiration, revocation and acceptance history
- Email-provider handoff status
- Join requests and approval or denial
- Support requests
- Security or recovery communications
- Transactional email history
- Notification preferences
Plaintext signup and invitation codes should be shown or transmitted only when necessary. Protected versions and audit metadata may be retained for security and evidentiary purposes.
K. Technical, analytics and security information
MuniVendor and its providers may automatically collect:
- IP address
- Browser type and version
- Device type
- Operating system
- Referring page
- Pages and features used
- Date, time and duration
- Session identifiers
- Authentication and authorization events
- Request URLs and response status
- Error and diagnostic information
- Suspected bot, scraping, abuse or malicious-activity indicators
- Invitation-code and signup-code attempt information
- Security, fraud-prevention and audit logs
The public website uses Google Analytics only after a visitor accepts analytics cookies through the cookie preference control.
2. How MuniVendor uses information
MuniVendor uses information to:
- Operate and maintain MuniVendor.
- Create and secure accounts.
- Authenticate users through passwords, Google and MFA.
- Verify government Agencies and authorized users.
- Create and manage Organization memberships.
- Process invitations and join requests.
- Maintain Agency and Offeror profiles.
- Create, publish and administer solicitations.
- Prepare, validate, seal, submit, open and evaluate responses.
- Generate and populate procurement forms.
- Process signatures and notarization workflows.
- Send transactional notifications.
- Provide customer service and training.
- Process payments and maintain credit ledgers.
- Grant and protect promotional credits.
- Prevent duplicate Organizations, fraud and abuse.
- Protect users, data and platform availability.
- Troubleshoot and improve performance and accessibility.
- Maintain audit trails and evidentiary integrity.
- Comply with contracts, law, court orders, audits and records-retention requirements.
- Establish, exercise or defend legal claims.
- Analyze public-website use when analytics consent has been provided.
3. How information is disclosed
A. Within an Organization
Authorized Owners and Account Users may access information belonging to their Organization according to their roles.
B. Between Agencies and Offerors
Information is disclosed as required by the procurement workflow.
An Agency may receive submitted Offeror information and documents. Offerors may receive published Agency information, notices, addenda, questions, answers, award information and other materials intended for them.
Draft or sealed materials are not disclosed merely because another user requests them.
C. To service providers
MuniVendor may use providers for:
- Cloud hosting and databases
- File storage
- Authentication
- Email delivery
- Analytics
- Cybersecurity
- Error monitoring
- Payment processing
- Customer support
- Electronic signatures or notarization
Providers may process information only as necessary to provide their services, subject to contractual and legal obligations.
D. For public records, legal process and government requirements
Procurement information held by an Agency may be subject to the New Jersey Open Public Records Act, N.J.S.A. 47:1A-1 et seq., other public-access laws, audits, subpoenas, discovery or records-retention requirements.
The applicable Agency determines public-record status, exemptions and redactions. MuniVendor may provide records to the Agency or as legally required.
E. For safety and security
MuniVendor may disclose information when reasonably necessary to detect or prevent fraud, abuse, security incidents, unlawful conduct or threats to users and systems.
F. Business transactions
Information may be transferred as part of a merger, acquisition, financing, restructuring or sale of all or part of MuniVendor Corporation, subject to appropriate confidentiality and legal protections.
G. With authorization
MuniVendor may disclose information as directed or authorized by the affected user or Organization.
4. What MuniVendor does not do
MuniVendor does not sell personal information for money.
MuniVendor does not use personal information for cross-context behavioral advertising or targeted advertising.
MuniVendor does not knowingly permit advertising networks to build profiles from authenticated procurement activity.
If these practices ever change, MuniVendor will update this Policy and provide legally required choices before beginning the new practice.
5. Data retention
MuniVendor retains information for the period reasonably necessary for the purposes described in this Policy, including:
- The duration of the account or Organization relationship.
- Completion of procurement and contractual workflows.
- Agency records-retention instructions and applicable government schedules.
- Public-records, audit, litigation and legal-preservation obligations.
- Accounting, tax, payment and dispute requirements.
- Security investigations and fraud prevention.
- Enforcement of credit and duplicate-registration rules.
Deleting an account does not automatically delete procurement records belonging to an Agency or records that must be retained by law or contract.
A protected one-way Tax ID uniqueness reference may be retained after account closure when reasonably necessary to prevent repeated promotional-credit claims or fraudulent re-registration.
MuniVendor will publish a more specific retention schedule when actual retention periods are formally adopted. Fixed retention periods will not be stated unless they match configured systems and contractual obligations.
6. Security
MuniVendor uses safeguards designed to protect information, including access controls, organization separation, private file storage, encrypted transmission, protected authentication, server-side authorization, audit history and security monitoring.
Sensitive identifiers are encrypted or comparably protected and masked in ordinary interfaces. Payment credentials are handled by the payment processor.
No method of transmission or storage is completely secure. Users must protect their credentials and report suspected unauthorized access promptly.
7. User choices and privacy rights
Depending on applicable law and the nature of the information, a person may request:
- Confirmation that MuniVendor processes their personal information.
- Access to personal information.
- Correction of inaccurate information.
- Deletion of eligible information.
- A portable copy of eligible information.
- Withdrawal of consent where processing depends on consent.
- Review of a denied privacy request where an appeal right applies.
Some requests may be fulfilled by the Organization that controls the relevant procurement record rather than MuniVendor.
Requests may be limited or denied when information must be retained for procurement, public records, security, fraud prevention, taxation, accounting, litigation, legal compliance or another permitted purpose.
MuniVendor may verify identity and authority before completing a request. Authorized-agent requests may require proof of authority.
Because MuniVendor does not sell personal information or use it for targeted advertising, there is no sale or targeted-advertising opt-out necessary under current practices.
8. Cookies and browser storage
MuniVendor uses cookies and similar technologies as described in the Cookie Policy.
Essential authentication and security technologies are required for the platform. Nonessential analytics follow the visitor’s cookie choice.
9. Children
MuniVendor is intended for government and business use by adults. It is not directed to children under 13, and MuniVendor does not knowingly collect personal information from children under 13.
If you believe a child supplied personal information, contact MuniVendor.
10. United States operation
MuniVendor is operated in the United States and is designed primarily for New Jersey government procurement.
If information is processed in another jurisdiction by a service provider, MuniVendor will use contractual or other safeguards as required by applicable law.
11. Changes to this Policy
MuniVendor may update this Policy as services and legal requirements change.
The current effective date will appear at the top. Material changes will be communicated through the website, platform, email or another reasonable method. Renewed acknowledgment or consent will be requested when legally required.
12. Contact
Privacy questions and requests may be directed to:
MuniVendor Corporation
Email: explore@munivendor.com
Phone: (732) 354-1215
New Jersey, United States