Privacy
Policy

Propulxia ("we," "our," or "Propulxia") provides an online software platform for intelligent generation of business proposals (the "Service").

In connection with access to and use of the website and the Service, we collect and process personal data about you or your team members, acting as the data controller within the meaning of the General Data Protection Regulation (GDPR).

We collect only the data strictly necessary for the platform to function properly and to provide our services. This includes:

• Account data: First and last name, email address, password (securely hashed), company name, billing and payment details.
• Business and proposal data: Data related to your projects, information about your clients (names, contact details), product details, information about your team members, pricing structures, and history of generated proposals.
• AI generation data: Text information entered or imported to power the intelligent assistant for generating business proposals.
• Technical and usage data: IP address, browser type, pages viewed, time spent, connection logs, and viewing statistics for publicly shared proposals.
• AI connector (Claude, ChatGPT…): If you connect an AI assistant to your account, it reads your proposals, clients, projects, tasks and timesheets and can prepare drafts, with your team role's permissions only. It can never send anything to a client or delete anything. What the assistant reads is passed to you in your conversation with its provider (Anthropic, OpenAI…), under that provider's terms; Propulxia does not receive the content of your conversations. We keep the connection (application name, last use) and a hash of its tokens, never the tokens themselves: the access token expires after one hour, the refresh token after 30 days without use. You can revoke a connection at any time in Settings › Integrations, which cuts access immediately.

Your personal data is processed for the following purposes:

The security of your data is an absolute priority. We implement robust technical and organizational measures to ensure a level of security appropriate to the risk:

• Hosting: Our data is stored and secured on the Firebase platform, part of Google Cloud Platform (GCP). Database servers (Cloud Firestore) and authentication servers apply strict security protocols.
• Encryption: All connections to our application use the HTTPS protocol with TLS encryption. Data is encrypted both in transit and at rest.
• Logical isolation: Our software architecture ensures that each organization's data is hermetically isolated and inaccessible to other accounts.

Propulxia does not sell, rent, or share your personal data for third-party commercial prospecting purposes.

We rely on trusted subprocessors, carefully selected for their GDPR compliance, to provide certain key features:

In accordance with European personal data protection regulations, you have the following rights over your data:

• Right of access: Obtain confirmation that your data is being processed and receive a copy of it.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your data, within the limits provided by law.
• Right to restriction of processing: Temporarily freeze the use of your data.
• Right to data portability: Receive your data in a structured, commonly used format so it can be transmitted to another provider.
• Right to object: Object at any time to the processing of your data on legitimate grounds or for prospecting purposes.

We use cookies and similar technologies to facilitate navigation on our marketing site and application portal.

Functional cookies: Essential for keeping your authentication session open and remembering your language and configuration preferences. They do not require prior consent under GDPR.

Audience measurement and marketing cookies (optional): Set only with your consent, given or refused in the banner shown on your first visit: audience measurement (Google Analytics, Microsoft Clarity) and measuring how well our ads perform (Meta, Microsoft, Google). Refusing does not affect your use of the Service in any way, and you can change your choice at any time.

For any question relating to this privacy policy or to exercise your rights over your personal data, you may contact our Data Protection Officer (DPO):