Privacy Policy

1. Who is responsible for data processing

ProposeNow is responsible for decisions related to the processing of personal data carried out in the operation of the platform. Privacy requests can be registered through24x7 Support Center.

When an organization uses ProposeNow to process information from its own customers, employees, or partners, that organization may act as the data controller for the data entered in the workspace, and ProposeNow acts as a processor according to its instructions.

2. Data we may process

Account and authentication data

• Name, email address, country, language, and organization.
• Technical identifier of the account and login provider.
• Logs required to maintain the session and protect access.

Workspace data

• Opportunities, clients, requirements, proposals, templates, libraries, and files uploaded by the user.
• Comments, reviews, approvals, versions, and organization settings.
• Ideas submitted through the public channel and contact details provided optionally.

Operational and financial data

• Access, audit, usage, error logs, IP address, and basic browser or device information.
• Name or company name, tax ID (CPF or CNPJ), email, phone, and billing address.
• Status, identifiers, and billing history. ProposeNow does not store full card data; processing is handled by Asaas.

Product usage metrics

• Section or feature accessed, approximate viewing duration, plan type, language, and technical result of important actions.
• Pseudonymous technical user, workspace, and session identifiers, used to produce aggregated metrics.
• We do not send the content of RFPs, proposals, files, clients, surveys, forms, names, or email addresses to the metrics tool.

4. Purposes and legal bases

We process data to execute the contracted or requested service, comply with legal obligations, protect rights, prevent fraud, serve legitimate interests related to product security and improvement, and, when applicable, based on the data subject's consent.

• Create and manage accounts, workspaces, roles, and permissions.
• Process documents and provide proposal analysis, generation, review, and versioning.
• Provide support, billing, operational communication, and service history.
• Detect abuse, investigate incidents, and preserve platform security.
• Produce aggregated performance and usage metrics for product evolution.

5. Processing with artificial intelligence

When AI features are used, snippets of documents and instructions required for the task may be sent to the model provider configured for the workspace, such as Gemini, OpenAI, or Azure OpenAI. The content is used to generate the requested response and must be reviewed by a person before use.

ProposeNow does not use Google or Microsoft login data to train models. Each organization should avoid entering unnecessary information, secrets, credentials, or sensitive personal documents and instructions.

6. Sharing and operators

We may share only the data necessary with vendors who support the operation of the service:

• Google and Microsoft, for user-chosen authentication.
• Asaas, for customer registration, billing, and payment processing.
• Infrastructure, hosting, database, security, and monitoring providers.
• AI providers selected by the platform or configured by the organization.

We may also share information when required by law, a valid authority order, or to protect rights and security. We do not sell personal data.

7. Retention, revocation, and deletion

Data is kept while the account or contractual relationship is active and for the period necessary to fulfill the described purposes, legal obligations, fraud prevention, and the regular exercise of rights.

The account holder may request the deletion of the account and associated data through the contact email. After validating the request, the primary data will be deleted or anonymized within a reasonable timeframe, subject to legal and contractual retentions and records essential for security. Protected residual copies may remain until the normal renewal of the provider's backups.

Access granted to Google can also be revoked atGoogle Account third-party connections. Revocation prevents new access by the provider, but does not replace a request to delete data already stored in ProposeNow.

8. Data subject rights

Pursuant to the General Data Protection Law (LGPD), the data subject may request confirmation of processing, access, correction, portability when applicable, information on sharing, anonymization, blocking, elimination, revocation of consent, and review of applicable decisions.

To protect the cardholder, we may request additional information to confirm your identity and relationship with the workspace before processing the request.

9. Security, cookies, and transfers

We adopt risk-compliant controls, including HTTPS communication, logical segregation by organization, permissions, event logging, and credential protection. No environment is absolutely invulnerable; relevant incidents will be handled in accordance with applicable law.

We use strictly necessary cookies to maintain session, security, and temporary authentication flow. Product metrics are collected without proprietary analytics cookies, without automatic field capture, and with session recording disabled. We do not use behavioral advertising cookies.

Some suppliers may process data outside of Brazil. In such cases, we seek to use suppliers with security and data protection commitments appropriate to the service provided.

10. Contact and changes to this policy

Questions, requests, or complaints related to privacy must be registered through24x7 Support Center. For general matters, usecontato@proposenow.com.br.

This policy may be updated to reflect legal, technical, or functional changes. The date of the most recent version will be indicated at the top of the page, and relevant changes may be communicated on the platform.