Privacy Policy

This policy explains what personal data pro-posal.io ("we", "us") collects when you use our website and proposal software, why we collect it, and the rights you have over it. We are the data controller for the personal data described here.

Who we are

pro-posal.io provides proposal software for audio-visual and live event production companies. You can contact us about privacy at darren@pro-posal.io.

The data we collect

• Account data: your name, email address, company name, role and password (stored only as a secure hash).
• Proposal content: the proposals, quotes, documents, images and text you create, and the details of the clients you send them to.
• Billing data: your plan and billing email. Card payments are handled by Stripe; we do not store your full card details.
• Usage data: basic information needed to run the service, such as when a proposal is opened and how long sections are viewed, so you can see your own proposal analytics.
• Integration data: if you connect Current RMS, we read opportunity and quote data from your account to populate proposals. We do not write back to Current RMS.

How we use it

We use your data to provide the service, authenticate you, process billing, send essential service emails, produce your analytics, and keep the platform secure. We do not sell your data, and we do not use it for advertising.

Who we share it with

We use a small set of trusted processors to run the service:

• Supabase for database and authentication hosting.
• Vercel for application hosting.
• Stripe for payment processing.
• Resend for transactional email.
• Amazon Web Services (S3, eu-west-2) for media and document storage.
• Anthropic to power the optional AI draft assistant, where you choose to use it.

Each processor only receives the data needed to perform its function, under a data processing agreement.

Where your data is held

We host data in the United Kingdom and the European Economic Area where possible. Where a processor transfers data outside the UK or EEA, that transfer is covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How long we keep it

We keep your account and proposal data for as long as your account is active. If you close your account, we delete or anonymise your data within a reasonable period, except where we must keep certain records (for example billing records) to meet legal obligations.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• restrict or object to how we process your data;
• receive a copy of your data in a portable format;
• complain to the Information Commissioner's Office (ICO).

To exercise any of these rights, email darren@pro-posal.io.

Cookies

We use only essential cookies. See our cookie policy for details.

Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, let you know by email.