Privacy Policy

Effective Date: November 1, 2026

1. Information We Collect

When you create an account, we collect your name, email address, and authentication credentials via Supabase. When you upload a proposal document, the PDF is encrypted and stored in private cloud storage. We record document access events, including timestamp, page viewed, active viewing duration, and device category.

2. How We Use Document Information

Document engagement data is provided solely to you (the proposal owner) in your private workspace dashboard. We never sell, rent, or publicly disclose proposal files or viewer analytics.

3. Storage & Security

Proposals are stored in private Cloudflare R2 object storage. Access is granted solely through short-lived signed URLs. Public proposal share links are protected by cryptographically unguessable tokens and stored as SHA-256 hashes.

4. Data Deletion

You may delete any proposal, client, or your entire workspace at any time. Deleting a proposal permanently removes the associated document from storage and cascades through all tracking events.