Privacy Policy

Who we are

Purrposal is a tool that turns a prospect's website into a branded, interactive sales proposal. This policy explains what we collect when you use it and what we do with it.

What we collect

Account data: the email address you sign up with and a securely hashed password. We never store your password in plain text.

Content you create: the proposals you generate, the agency and prospect details you enter, your logo and theme choices, and any text you write or edit.

Public website content: when you paste a prospect's URL, we read the publicly available content of that page (text, images, branding) to draft a proposal. We only read what is already public on the web.

Proposal engagement: when a proposal you share is viewed, we record interaction events (sections viewed, time on page, scroll depth, clicks, and questions asked to the in-proposal assistant) so you can see how the prospect engaged.

Site analytics: like most products, we record first-party analytics on our own site to understand how people find and use Purrposal. This includes the page you came from, basic device and browser details, a rough location from your IP, and on-site actions such as pages viewed and buttons clicked. We assign a friendly placeholder name to anonymous visitors until they sign in. We do not build advertising profiles and we do not sell this data.

Cookies and local storage

We use a small number of first-party cookies and browser storage items. Some are essential: they keep you signed in (secure, http-only session cookies). Others are analytics: a visitor identifier so our own usage stats are not double-counted, and the first-touch source of your visit. We do not use third-party advertising cookies. You can clear these from your browser at any time.

How we use it

To generate, store, and serve your proposals, to show you engagement analytics, to process acceptance signatures, and to take payment when a prospect accepts a proposal.

We do not sell your data, and we do not share it with third parties except the infrastructure providers listed below that are required to run the service.

Service providers

Hosting and database: our application runs on Vercel and stores data in Supabase. AI drafting uses OpenAI to generate proposal copy from the public content you provide. To show how a prospect's site looks today, we capture a screenshot of their public homepage through a rendering service. Payments are processed by Razorpay; we never see or store full card details. These providers process data only to deliver the service.

Data retention and deletion

Your proposals are kept until you delete them or close your account. You can delete any proposal at any time from your dashboard. To delete your account and all associated data, email hello@purrposal.com and we will remove it.

Security

Passwords are hashed, sessions are carried in secure, http-only cookies, and access to your proposals is scoped to your account. The proposal pages you choose to share are public by link, the same way an unlisted link works, so only people you send the link to can find them.

Your rights

You can access, correct, export, or delete your data at any time. Email hello@purrposal.com for any request and we will respond promptly.

Changes

If we make material changes to this policy we will update the date at the top of this page. Continued use of Purrposal after a change means you accept the updated policy.