Privacy Policy

Effective Date: April 2, 2026

This Privacy Policy describes how Vinaveda Studios LLC ("Company," "we," "us," or "our") collects, uses, and shares your personal information when you use ProposalDrop at https://proposaldrop.app (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and optionally your company name. If you sign in with Google OAuth, we receive your name, email address, and profile picture from Google.

1.2 Proposal and Invoice Content

We store the content you create within the Service, including proposal text, client names, project descriptions, pricing details, invoice data, and e-signature records. This data is necessary to provide the Service.

1.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store, process, or have access to your full credit card numbers. We receive limited transaction data from Stripe, such as the last four digits of a card, transaction amounts, and payment status, to display in your dashboard.

1.4 Usage and Analytics Data

We collect usage data including pages visited, proposal view counts, proposal open events, feature usage patterns, browser type, device type, and IP address. This data helps us improve the Service and provide analytics features such as proposal view tracking.

1.5 Cookies and Session Data

We use cookies and similar technologies for authentication session management, keeping you signed in, and remembering your preferences. These are essential cookies required for the Service to function. We do not use third-party advertising or tracking cookies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Generate AI-powered proposals based on your input using Anthropic's Claude AI
  • Process payments and manage subscriptions via Stripe
  • Send transactional emails (proposal notifications, payment confirmations, account alerts) via Resend
  • Provide proposal analytics (views, opens, signatures)
  • Authenticate your identity and secure your account via Supabase
  • Respond to support requests
  • Comply with legal obligations

3. Third-Party Services

We share data with the following third-party services as necessary to operate the Service:

  • Supabase — Authentication, database hosting, and file storage. Your account data and proposal content are stored in Supabase-managed PostgreSQL databases.
  • Stripe — Payment processing for subscription billing and client payment collection. Stripe receives payment details directly and is a PCI-DSS certified processor.
  • Anthropic (Claude AI)— Proposal content generation. When you use AI proposal generation, your project description and relevant context are sent to Anthropic's API. Anthropic does not use API inputs to train their models.
  • Google — OAuth authentication. If you sign in with Google, Google provides us with your basic profile information.
  • Resend — Transactional email delivery. Your email address and notification content are shared with Resend to deliver email notifications.
  • Vercel — Application hosting and infrastructure. Request logs and performance data may be processed by Vercel.

We do not sell your personal data to any third party. We do not share your data with third parties for their own marketing purposes.

4. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes (such as payment records, which may be retained for up to 7 years).

5. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data and receive a copy of it
  • Correct inaccurate or incomplete personal data
  • Delete your personal data and account
  • Export your data in a portable format (PDF export of proposals)
  • Object to or restrict certain processing of your data
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at support@proposaldrop.app. We will respond to verified requests within 30 days.

6. Data Deletion

You can delete your account at any time from the Settings page in your dashboard. Upon account deletion, we will remove your personal data, proposals, invoices, and analytics data within 30 days. Some data may be retained in encrypted backups for up to 90 days before being permanently purged. Payment transaction records required for legal compliance may be retained longer.

7. GDPR and International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with data protection laws, the following applies:

  • Legal Basis: We process your data based on contractual necessity (to provide the Service), legitimate interests (to improve the Service and prevent fraud), and consent (where applicable).
  • Data Transfers: Your data may be transferred to and processed in the United States. We rely on standard contractual clauses and the data processing agreements of our sub-processors to safeguard international transfers.
  • Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, row-level security policies on our database, secure authentication via Supabase, and regular security reviews. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Vinaveda Studios LLC
Email: support@proposaldrop.app