Privacy Policy

1. Overview

Propsly ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our cloud-hosted service at propsly.org. If you self-host Propsly, your data stays entirely on your infrastructure and this policy does not apply.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and profile picture provided through OAuth (Google, GitHub).
• Proposal content: The proposals, templates, and documents you create within the Service.
• Usage data: Analytics on how you interact with the Service (page views, feature usage) via Vercel Analytics.
• Proposal tracking data: When recipients view proposals, we collect view timestamps, approximate location, device type, and time spent on sections.

3. How We Use Your Information

• To provide and maintain the Service
• To authenticate your identity and secure your account
• To send transactional emails (welcome, proposal notifications)
• To provide proposal tracking and analytics to proposal senders
• To improve the Service based on usage patterns
• To communicate important updates about the Service

4. Data Storage and Security

Your data is stored securely on Supabase (PostgreSQL) with row-level security policies. All data is encrypted in transit (TLS) and at rest. We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting
• Vercel — application hosting and analytics
• Resend — transactional email delivery
• Sentry — error monitoring

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

6. Your Rights

You have the right to:

• Access and export your data at any time
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Self-host Propsly to maintain full control over your data

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Vercel Analytics is privacy-focused and does not use cookies.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and proposal content within 30 days. Anonymized analytics data may be retained indefinitely.

9. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect information from children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email. The "Last updated" date at the top indicates the latest revision.

11. Contact

For privacy-related inquiries, contact us here.