Privacy Policy
Effective date: March 8, 2026 · Last updated: March 8, 2026
PropAI (“we”, “our”, or “us”) operates the PropAI platform at propai-proposals.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using PropAI, you agree to the practices described here.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, company name, and password (stored as a secure hash via Supabase Auth). If you sign up with Google or Facebook, we receive your name and email from that provider.
Profile & Branding
You may optionally upload a company logo and other branding assets. These are stored in your private Supabase Storage bucket and used solely to personalise your proposals.
Uploaded Files
To generate proposals, you upload files such as text documents, PDFs, images, audio, and video. These files are temporarily stored in your private storage bucket and processed by our AI pipeline. Files are never shared with other users and are not used to train AI models.
Proposals & Usage Data
We store the proposals we generate for you, along with metadata such as creation date, template choice, and revision history. We also track plan usage (e.g. proposals generated this month) to enforce plan limits.
Billing Information
Payments are handled by Stripe. We never see or store your full card number. We receive limited billing data from Stripe (e.g. plan type, subscription status, last-four digits of card) to manage your account.
Communications
We use Resend to send transactional emails (e.g. email confirmation, password reset). We may also send product update emails; you can unsubscribe from these at any time.
2. How We Use Your Information
- To create and manage your account
- To process uploaded files and generate AI-powered proposals
- To personalise proposals with your branding (logo, company name)
- To manage your subscription and enforce plan limits
- To send transactional emails (account confirmation, password reset)
- To respond to support requests
- To detect and prevent fraud or abuse
- To improve the platform (aggregated, anonymised analytics only)
We do not sell your personal data. We do not use your uploaded files or proposal content to train AI models.
3. Third-Party Services
PropAI integrates with the following third-party services. Each has its own privacy policy.
| Service | Purpose |
|---|---|
| Supabase | Authentication, database, and file storage |
| Anthropic Claude | AI proposal generation and revision |
| Stripe | Payment processing and subscription management |
| Resend | Transactional email delivery |
| Google / Facebook | Optional OAuth sign-in |
| Vercel | Application hosting and CDN |
4. Data Storage & Security
Your data is stored on Supabase infrastructure with row-level security (RLS) enabled — meaning only you can access your own files, proposals, and profile data. All data is encrypted in transit (TLS) and at rest. We follow industry-standard security practices and regularly review our controls.
Despite our best efforts, no system is 100% secure. If you believe your account has been compromised, contact us immediately at support@propai-proposals.com.
5. Data Retention
We retain your account data and proposals for as long as your account is active. If you delete your account, we will delete your personal data and proposals within 30 days, except where we are required to retain it for legal or regulatory reasons (e.g. billing records).
Uploaded source files (used to generate a proposal) may be retained in storage until you manually delete them or close your account.
6. Cookies
PropAI uses cookies and similar technologies for authentication (session cookies managed by Supabase) and basic analytics. We do not use advertising cookies or sell cookie data to third parties. You can control cookies through your browser settings; disabling authentication cookies will prevent you from staying logged in.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of your personal data
- Correction — update inaccurate or incomplete data
- Deletion — request deletion of your account and data
- Portability — receive your data in a portable format
- Objection — object to certain processing activities
To exercise any of these rights, email support@propai-proposals.com. We will respond within 30 days.
8. Children's Privacy
PropAI is not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice in the app. Continued use of PropAI after changes become effective constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at: