Back to ProposalCraft
Last updated: April 2026
Legal

Privacy Policy

ProposalCraft is operated by EazyWebNC. This policy explains what data we collect, how we use it, and the rights you have over your information.

1. Information We Collect

  • Account data: Your email address and display name, collected via Supabase Auth when you sign up or log in with a social provider.
  • Proposal content: All proposals you create — including client names, project descriptions, pricing, and template selections — are stored in our Supabase database.
  • AI usage data: Prompts you submit to the AI proposal generator are processed to generate your content. We do not use your proposal content to train AI models.
  • Usage analytics: Anonymised data on feature usage and session behaviour to improve the product. No personally identifiable information is included.
  • Technical data: IP address, browser type, device, and referral source collected automatically.

2. How We Use Your Data

  • To create, store, and manage your proposals and templates.
  • To authenticate you and maintain a secure session.
  • To generate AI-powered proposal content via the AI engine.
  • To send transactional emails (proposal export links, account notifications). You may opt out of marketing emails at any time.
  • To improve product features based on aggregated, anonymised usage patterns.
  • To comply with legal and regulatory obligations.

3. Data Storage & Security

  • All data is stored in Supabase (PostgreSQL) on secure cloud infrastructure. Data is encrypted at rest and in transit via TLS/HTTPS.
  • Row-level security (RLS) policies ensure each user can only access their own proposals.
  • Exported PDF proposals are generated server-side and are not stored permanently — they are streamed directly to you.
  • We retain your data for as long as your account is active. You may request deletion at any time.

4. Cookies

  • Authentication cookies: Secure, HTTP-only cookies used to maintain your login session via Supabase Auth.
  • Preference cookies: UI settings (theme, default template) stored in localStorage.
  • Analytics cookies: Privacy-respecting analytics that do not track individuals across sites.
  • You can disable cookies in your browser settings, but this may prevent you from logging in.

5. AI & Third-Party Processing

  • ProposalCraft uses an AI API to generate proposal content. Your prompts and project details are sent to this API solely to generate your proposal.
  • We do not permit the AI provider to use your data for training purposes.
  • Other subprocessors: Supabase (database & auth), Cloudflare (CDN), Stripe (payments).
  • We do not sell or share your data with advertisers or data brokers.

6. Your Rights (GDPR & Privacy)

  • Access: Request a copy of all personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete personal data.
  • Erasure: Request deletion of your account and all proposals.
  • Portability: Export all your proposals as JSON or PDF at any time from your dashboard.
  • Objection: Object to processing based on legitimate interests.
  • To exercise these rights, email contact@eazyweb.nc. We respond within 30 days.

7. Proposal Data & Confidentiality

  • Your proposal content is private by default. It is never shared with other users.
  • Shareable proposal links (if enabled) are access-controlled via a unique, unguessable URL token.
  • We do not read your proposal content except for technical support when you explicitly request it.

8. Children's Privacy

  • ProposalCraft is a professional tool not directed at children under 16. We do not knowingly collect data from minors.

9. Changes to This Policy

  • We may update this policy to reflect changes in our practices or legal requirements. We will notify you via email or in-app notice at least 14 days before material changes take effect.

10. Contact

  • EazyWebNC — contact@eazyweb.nc
  • Nouméa, New Caledonia
  • eazyweb.nc

Questions about your privacy or data? We're here to help.

Contact Us