Privacy Policy
Last updated: June 20, 2026
1. Introduction
Propel ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using the Service, you agree to the practices described here.
2. Information We Collect
Account information: When you register, we collect your email address and a hashed password. We never store your password in plain text.
Content you create: Proposals, contracts, invoices, client names, email addresses, and line items you enter into the Service are stored to deliver the Service to you.
Billing information: Payments are processed by Paddle, our Merchant of Record. We do not store your credit card number or full payment details. We receive a transaction record and subscription status from Paddle.
Usage data: We collect anonymized analytics events (e.g. proposal created, proposal sent) via PostHog to understand how the product is used and improve it. No personally identifiable information is attached to these events beyond your internal user ID.
Technical data: IP address, browser type, device type, and page visit timestamps collected automatically when you use the Service.
3. How We Use Your Information
- To provide, operate, and improve the Service
- To send transactional emails (proposal received, contract signed, invoice paid)
- To process billing and manage your subscription via Paddle
- To respond to support requests
- To detect and prevent fraud or abuse
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Data Sharing
We share your data only with the following categories of third-party service providers, and only to the extent necessary to operate the Service:
- Paddle — payment processing and subscription management
- Resend — transactional email delivery
- PostHog — product analytics (anonymized)
- Vercel / hosting provider — infrastructure and file storage
We may also disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.
5. Client Data
When you use Propel to send proposals or invoices, you provide us with your clients' names and email addresses. You are the data controller for your clients' data. We process it only on your behalf to deliver the Service. You are responsible for ensuring you have the right to share your clients' information with us.
6. Electronic Signature Data
When a recipient signs a contract through Propel, we record their email address, IP address, and timestamp as evidence of the signature event. This data is stored securely and associated with the signed document. It is retained as long as your account is active, plus 30 days after termination.
7. Data Retention
We retain your account data and content for as long as your account is active. If you close your account, we will delete your data within 30 days, except where we are required to retain it by law (e.g. billing records, which may be retained for up to 7 years for tax compliance).
8. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Cookies
We use cookies and similar technologies to maintain your session after login and to collect anonymized analytics. We do not use third-party advertising cookies. You can control cookie behavior through your browser settings, though disabling cookies may affect Service functionality.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Portability: Request an export of your data in a machine-readable format
- Objection: Object to processing of your data in certain circumstances
To exercise any of these rights, email us at privacy@aipropel.app. We will respond within 30 days.
11. Children's Privacy
The Service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with their data, contact us and we will delete it promptly.
12. International Transfers
Your data may be processed in countries outside your own, including the United States. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact
For privacy-related questions or requests, contact us at privacy@aipropel.app.