Privacy Policy

1. What We Collect

When you use Proppi, we collect the following information:

• Account information: Email address and hashed password when you create an account.
• Uploaded documents: Files you upload to your projects (PDFs, DOCX, PPTX, XLSX, TXT, Markdown, and images).
• Chat data: Questions you ask and the responses generated by the Service, including session history.
• Usage data: Basic analytics such as page views, feature usage frequency, and session duration. We do not track granular behavioral patterns.

2. How We Use Your Data

We use the data we collect to:

• Process your uploaded documents through our RAG pipeline to generate citation-backed answers.
• Extract style profiles (notation, conventions, formatting) from your sources to personalize responses.
• Maintain your chat history and session data so you can pick up where you left off.
• Improve and maintain the Service's reliability and performance.
• Communicate important updates about your account or the Service.

We do not use your uploaded documents or chat data to train machine learning models. Your content is processed on-demand to generate responses and is not used for any other purpose.

3. Data Storage & Security

Your documents and data are stored securely using Supabase, which provides encrypted storage at rest and in transit. We implement industry-standard security measures including TLS encryption for all data in transit, row-level security (RLS) policies to ensure you can only access your own data, and regular security reviews of our infrastructure.

4. Third-Party Services

To provide the Service, we share limited data with the following third-party providers:

• Supabase: Database and file storage provider. Your account data and uploaded documents are stored on Supabase infrastructure.
• OpenAI / Anthropic: LLM API providers. Portions of your documents and queries are sent to these providers for processing. These providers do not retain or train on data sent through their APIs per their data processing agreements.

We do not sell, rent, or share your personal data with any other third parties for marketing or advertising purposes.

5. Data Retention & Deletion

We retain your data for as long as your account is active. If you delete your account, we will permanently delete all associated data, including uploaded documents, chat history, extracted style profiles, and account information. This deletion is irreversible. We may retain anonymized, aggregated data that cannot be linked back to you for analytics purposes.

6. Cookies & Analytics

Proppi uses minimal cookies required for authentication and session management. We do not use third-party advertising cookies or invasive tracking technologies. We may use basic, privacy-respecting analytics to understand overall usage patterns and improve the Service.

7. Children's Privacy

Proppi is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected data from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Deletion: Delete your account and all associated data at any time through your account settings.
• Portability: Export your uploaded documents and chat history.
• Correction: Update or correct your account information at any time.

To exercise any of these rights, contact us at privacy@proppi.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service prior to the changes taking effect. We encourage you to review this policy periodically.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@proppi.app.