Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Contact and account information: name, work email address, company name, job title, login credentials, and other information you provide when requesting a demo, contacting us, or creating an account.
• Transaction and billing information: payment-related details, billing contacts, and subscription information if you purchase paid Services.
• Uploaded content and workspace data: proposal materials, RFP packages, compliance data, source documents, prompts, inputs, generated drafts, and other content you choose to upload to or create within the platform.
• Communications: the contents of messages, support requests, feedback, survey responses, and other communications you send to us.
• Usage and technical data: IP address, browser type, operating system, device data, referring URLs, timestamps, page views, clicks, session activity, feature usage, crash logs, and similar diagnostic or analytics information.
• Cookies and similar technologies: data collected through cookies, local storage, pixels, and similar tools that help us remember preferences, maintain sessions, and understand how the Services are used.
• Information from third parties or integrations: information we receive from service providers, integrations, or third-party sources that you authorize or that support the operation of the Services.

2. How We Use Information

We may use personal information to:

• provide, operate, maintain, and improve the Services;
• create and manage accounts, authenticate users, and administer customer relationships;
• process uploaded documents and generate platform outputs such as requirement extractions, compliance matrices, outlines, win themes, and proposal drafts;
• respond to inquiries, schedule demos, and provide customer support;
• monitor usage, investigate issues, detect misuse, and protect the security, availability, and integrity of the Services;
• send administrative, transactional, and service-related communications, including notices about accounts, policies, product changes, or security matters;
• send marketing or promotional communications where permitted by law or where we have the necessary consent;
• analyze trends, test features, and improve product performance, functionality, and user experience; and
• comply with legal obligations and enforce our terms, policies, and contractual rights.

3. Legal Bases for Processing

Where applicable law requires a legal basis for processing, we may process personal information on one or more of the following grounds:

• Performance of a contract: where processing is necessary to provide the Services or fulfill our obligations to you.
• Legitimate interests: where processing is reasonably necessary for our business operations, product improvement, fraud prevention, security, or communications, and those interests are not overridden by your rights.
• Consent: where you have given us permission to process your information for a specific purpose.
• Legal obligation: where processing is necessary to comply with applicable law, regulation, court order, or other legal process.

4. Cookies and Similar Technologies

We may use cookies, local storage, pixels, and similar technologies to remember preferences, maintain sessions, analyze site traffic, understand product usage, and improve the performance of the Services.

You can control certain cookie settings through your browser or device settings. However, disabling cookies or similar technologies may affect the functionality of parts of the Services.

5. How We Share Information

We may share information in the following circumstances:

• Service providers: with vendors, contractors, and subprocessors who help us host infrastructure, process payments, provide analytics, deliver communications, support customers, or operate core platform functionality on our behalf.
• At your direction: when you instruct us to share information, enable integrations, or connect third-party tools and services.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.
• Legal and security reasons: where disclosure is required by law or reasonably necessary to protect our rights, users, systems, property, or the public.
• Aggregated or de-identified information: where the information no longer reasonably identifies an individual.

We do not disclose customer-uploaded content except as needed to provide the Services, comply with law, protect rights and security, or as otherwise described in this Privacy Policy.

6. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and legal records, resolve disputes, enforce our agreements, and meet legitimate operational needs.

Retention periods may vary depending on the type of information, the nature of the relationship, applicable legal requirements, contractual commitments, and whether continued retention is needed for security, backup, or compliance purposes.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet and no method of electronic storage is completely secure. As a result, we cannot guarantee absolute security.

8. International Data Transfers

PropAI operates primarily in the United States. If you use the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate.

By using the Services or providing information to us, you acknowledge that your information may be processed in jurisdictions that may have data protection laws different from those in your country of residence, subject to applicable legal requirements.

9. Your Choices and Rights

Depending on where you live, you may have certain privacy rights under applicable law. These may include the right to request access to, correction of, deletion of, or restriction of certain personal information, as well as the right to object to certain processing or request a copy of your information.

You may also opt out of non-essential marketing communications by following the unsubscribe instructions in those messages or by contacting us directly. We may still send service-related or other non-marketing communications when necessary.

To submit a privacy request, contact us at info.propai@georgestreetinc.com.com . We may need to verify your identity before processing certain requests, and some rights may be limited by applicable law.

10. Children's Privacy

The Services are intended for business users and are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If you believe a child has provided us with personal information, please contact us so we can review the matter and take appropriate steps.

11. Third-Party Links and Services

The Services may contain links to third-party websites, products, integrations, or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review the privacy policies of any third-party service before providing information to it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may revise the "Last updated" date above and take additional steps to notify users where appropriate.

Your continued use of the Services after an updated Privacy Policy becomes effective means the revised Policy will apply going forward.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at info.propai@georgestreetinc.com.com .

Unless otherwise specified, this Privacy Policy is provided on behalf of PropAI, L.L.C..