Privacy Policy

Introduction

Welcome to Propefai. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

Information We Collect

We collect and process the following types of information:

• Account Information: Email address, name, company name, and password
• Profile Information: Company logo, settings, and preferences
• Usage Data: Proposals created, templates used, and feature interactions
• Device Information: IP address, browser type, operating system, and device identifiers
• Authentication Data: Firebase authentication tokens and session data

How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI-powered proposal generation service
• AI Processing: To generate personalized proposals using Claude AI based on your inputs
• Account Management: To manage your account, authentication, and subscription
• Communication: To send you service updates, security alerts, and support messages
• Analytics: To understand how users interact with our platform and improve user experience
• Security: To detect, prevent, and address technical issues and fraudulent activity

Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All data is encrypted in transit using SSL/TLS and at rest using industry-standard encryption
• Database Security: We use PostgreSQL with secure authentication and access controls
• Authentication: Firebase Authentication provides secure user authentication with industry best practices
• Access Controls: Only authorized personnel have access to user data on a need-to-know basis
• Regular Audits: We conduct regular security audits and vulnerability assessments

Third-Party Services

We use the following third-party services that may collect and process your data:

• Anthropic Claude AI: For AI-powered proposal generation. Data is processed according to Anthropic's privacy policy
• Firebase (Google): For authentication and user management
• Vercel: For hosting and content delivery
• PostgreSQL (Neon): For database storage
• Stripe: For payment processing (if applicable)

Your Rights (GDPR)

Under GDPR and other data protection laws, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request restriction of processing your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Rights Related to Automated Decision-Making: Not be subject to automated decisions with legal effect

To exercise any of these rights, please contact us at privacy@propefai.ai

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy:

• Account Data: Retained while your account is active and for 90 days after account deletion
• Proposals and Templates: Retained while your account is active and for 30 days after account deletion
• Usage Analytics: Aggregated and anonymized after 12 months
• Legal Requirements: Some data may be retained longer to comply with legal obligations

Cookies and Tracking

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: To understand how users interact with our platform
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.

Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives an adequate level of protection.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.