GPO Intel

Privacy Policy

Last updated: July 2, 2026

UltraViolet Holdings, LLC, doing business as GPO Intel ("we," "us," or "our"), operates the website gpointel.com (the "Service"). This Privacy Policy describes how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you create an account, we collect your email address and password (hashed and stored securely via Supabase Auth).

Payment Information: When you subscribe, payment is processed by Stripe. We do not store your full credit card number. Stripe provides us with your name, email, subscription status, and last four digits of your card.

Usage Data: We collect analytics data about how you use the platform, including pages visited, profiles viewed, searches run, features used, and time spent. This data is collected via PostHog and in our own database, and is associated with your account when you are logged in. We also record first-touch acquisition attribution when you sign up — UTM parameters, the referring page, and the landing page you first visited — stored with your account for channel analysis. IP addresses are processed transiently for rate limiting and abuse prevention.

AI Chat Interactions: When you use Ask GPO Intel, your questions and the AI-generated answers are recorded and stored in our database, associated with your account. We review these conversations to improve answer quality, fill data gaps, and develop the platform. Please do not include sensitive personal information in your queries.

Newsletter Signups: If you subscribe to our email digest, we collect your email address and your notification preferences.

Resume Data: If you use the Resume Analysis feature, we store your uploaded résumé and the text extracted from it, associated with your account, in private storage. We use it only to (a) understand your professional background so we can match you to relevant job listings and alerts, and (b) if you choose to apply to the expert contributor program, prefill your application. Your résumé is never shown on any public profile and is never visible to other users or to employers. Résumé processing (parsing and job matching) uses Anthropic's API. You can delete your résumé at any time from the Resume page, and it is removed when you delete your account. See "AI Features" below for more detail.

User Submissions: If you submit tips, corrections, or GPO suggestions through the Submit Intel feature, we store the content of your submission along with your user ID and email.

Expert Program: If you apply to or participate in our expert contributor program, we collect your name, professional title, employer, LinkedIn URL, years of industry experience, contact email, and areas of expertise. Answers and intelligence you contribute are stored, reviewed, and may be surfaced in the product (with attribution handled according to your stated preference) and compensated under the program's terms. You may also voluntarily add employer, LinkedIn, and expertise details in Settings to receive better-targeted expert questions.

2. Data About Industry Professionals

As a B2B intelligence platform, we maintain profiles of healthcare-industry executives and organizations. This information is compiled from public sources — news coverage, professional profiles, company websites, and regulatory filings — and from industry-expert contributions. The categories of data we maintain about industry professionals include: name, professional title, employer, career history, and other professional-role data. We do not maintain this data about individuals in a consumer capacity, and it is not used for consumer profiling.

Our lawful basis for this processing is our legitimate interest in industry transparency and providing business-to-business intelligence about the healthcare supply chain. If you are an industry professional listed on the Service, you may request correction of inaccurate information, object to the processing, or request removal of your profile by emailing harrison@gpointel.com. We respond to such requests within 30 days.

3. AI Features

Several features on GPO Intel use Anthropic's Claude AI API, including:

  • Resume Analysis — your uploaded résumé text is sent to Anthropic for parsing and job matching; we store your résumé and its parsed text privately (see "Resume Data" above), and you can delete it anytime
  • Meeting Prep — GPO profile data is sent to Anthropic to generate briefing content
  • Ask GPO Intel — your search queries are processed by Anthropic to generate answers; the resulting conversations are recorded as described in "AI Chat Interactions" above

Anthropic's data handling is governed by their privacy policy. We do not share personally identifiable account information with Anthropic when using these features.

4. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process subscription payments
  • Send you email digests and alerts (if you opt in)
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve the platform
  • Comply with legal obligations

5. Information Sharing

We do not sell your personal data. We share information only with the following service providers, solely to operate the platform:

  • Stripe — payment processing
  • Supabase — database hosting and authentication
  • Vercel — website hosting and deployment
  • Resend — transactional email delivery
  • PostHog — product analytics
  • Anthropic — AI analysis (resume matching, meeting preparation, search)
  • Sentry — server error monitoring

6. Data Security

We use industry-standard security measures including encryption in transit (TLS) for all traffic, encryption at rest provided by our infrastructure providers, and secure authentication via Supabase Auth. No method of transmission or storage is 100% secure, but we take reasonable precautions to protect your information.

7. Cookies and Tracking

We use the following cookies:

  • Authentication cookies — to keep you logged in across sessions
  • PostHog analytics — usage tracking to improve the platform

We do not use third-party advertising cookies.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email us at harrison@gpointel.com. We will respond within 30 days. Industry professionals listed in our directory who are not users of the Service have the same correction, objection, and removal channel described in "Data About Industry Professionals" above.

EU/UK residents have additional rights under GDPR and UK GDPR, including the right to data portability (Article 20), the right to erasure (Article 17), and the right to object to processing. Contact us at harrison@gpointel.com to exercise any of these rights. Note that published expert contributions are de-identified rather than deleted, as described under "Data Retention" below.

California residents have rights under the CCPA, including the right to know what personal information we collect and to request deletion. We do not sell personal data.

9. Data Retention

We retain your account data for as long as your subscription is active. Upon account deletion or request, we will delete your personal data within 30 days, except where retention is required by law. Your résumé is retained (in private storage) until you delete it from the Resume page or delete your account, at which point it is removed.

Expert contributions. Answers and intelligence you have contributed to the expert program and that have been published or incorporated into the Service are a permanent part of the Service and are not deleted when you delete your account. Instead we de-identify them: your name, contact details, and the link to your account are removed, and any named attribution is dropped to anonymous. Once de-identified in this way, the contribution is no longer personal data. This is the sole exception to the deletion described above, and it is described in the Expert Contributor Agreement you accept before contributing.

10. International Data Transfers

The Service is operated from the United States, and your data is processed and stored in the United States by us and by the service providers listed above. If you are a resident of the EU or UK, transfers of your personal data to the United States rely on our processors' certifications under the EU–US Data Privacy Framework (and the UK Extension) and/or Standard Contractual Clauses incorporated into our agreements with those processors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you by email.

12. Contact Us

If you have questions about this Privacy Policy, contact us at harrison@gpointel.com.

UltraViolet Holdings, LLC · 5900 Balcones Drive, Ste 100, Austin, TX 78731