Privacy Policy

This policy explains how we handle personal data in three situations:

• Customers: the sales teams and administrators who create a workspace and use the Service to write, send and track proposals.
• Readers: the people who open, read, forward or sign a proposal sent through the Service.
• Visitors: people who browse this website or fill in the sign-up or contact forms.

For proposals, deals and reader activity, our customer is the data controller and we process that data on their behalf. For our own website, sign-ups and account billing, we are the controller.

• Account data: name, work email, company, role, team size and billing details.
• Workspace content: proposals, decks, content library blocks, price lists, templates and comments created by your team.
• CRM data you choose to connect: deals, contacts, amounts, stages and notes from tools such as Salesforce, HubSpot, Zoho CRM or Pipedrive.
• Call notes and transcripts that you paste or connect for drafting.
• Reader activity on proposal links: open times, time spent on each page, device type, approximate location from IP address, forwards and option selections.
• Signature records: signer name, email, one-time code verification, IP address, device and time stamps.
• Website data: pages visited and form submissions, using only cookies needed to run the site and its forms.

• To run the Service: drafting proposals, building decks, showing pricing tables, collecting signatures and showing read activity to the sender.
• To sync results back to the CRM you connect, such as read events, signed status and the Won stage.
• To create your account and send login details after you sign up.
• To answer messages sent through the contact page.
• To secure the Service, prevent abuse and meet legal duties.

We do not sell personal data. We do not use one customer's proposals, deals or reader data to train AI models for any other customer.

When you ask for a draft, the AI Proposal Writer reads only content from your own workspace: your library, price lists, templates, the CRM deal you selected and the call notes you provided.

We use AI providers under agreements that forbid them from keeping your content or using it to train their models. Drafts are shown to a person on your team for review and are never sent to a client automatically.

If you received a proposal through the Service, the sender can see when you opened it, how long you spent on each page, which options you chose and whether the link was opened by someone else after you forwarded it.

This tracking happens only on the proposal link. We do not follow you across other websites, we do not build profiles of readers across different senders and we do not use reader data for advertising.

Each proposal link shows a short notice about this tracking. To ask about your data, contact the company that sent you the proposal, or write to us through the contact page.

• Service providers who host, store, email and process data for us under written contracts with confidentiality and security terms.
• The CRM and tools you connect, when you ask us to sync data with them.
• Authorities, when the law requires it and only to the extent required.

Data is encrypted in transit with TLS and at rest. Access inside our team is limited to people who need it to run and support the Service, and is logged.

Signed documents are sealed so that changes after signing can be detected. Workspaces on the Sunset plan can require single sign-on for every user.

We keep workspace content for as long as your account is active. Reader activity is kept with the proposal it belongs to and is deleted when the proposal is deleted.

Signature records and sealed documents are kept for as long as your workspace keeps the signed proposal, so you can prove what was agreed.

When an account is closed, workspace content is deleted within 30 days, and backups are cleared within a further 60 days, unless the law requires us to keep something longer.

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR, you may have the right to access, correct, delete or move your personal data, to withdraw consent and to complain to a regulator.

Customers can export or delete their workspace content at any time from the admin settings. For anything else, write to us through the contact page and we will reply within 30 days.

Customers can choose to keep workspace data in India or the European Union on the Sunset plan. Where data moves across borders, we use contracts and safeguards required by the applicable law.

If we make a material change, we will tell workspace administrators by email and in the product before it takes effect.