← Back to PropFill

Privacy Policy

Effective date: June 30, 2026

1. Introduction

Blonlab Inc. ("we", "us", or "our") operates PropFill, an AI-powered proposal generator available at propfill.co (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication provider information (e.g., Google, GitHub). We do not store passwords directly; authentication is handled through secure third-party OAuth providers via Supabase.

2.2 Uploaded Documents

When you use the Service, you upload template files (DOCX, PPTX), RFP documents (PDF, DOCX), and optionally company background materials. These files are processed solely to generate your requested output. We do not read, analyze, or use your documents for any purpose other than providing the Service to you.

2.3 Payment Information

Payment processing is handled entirely by our Merchant of Record, Paddle.com Market Ltd. We do not collect, store, or process credit card numbers or other payment instrument details. Paddle may collect billing information as described in their privacy policy.

2.4 Usage Data

We automatically collect certain technical data when you access the Service, including IP address, browser type, pages visited, time and date of access, and device identifiers. This data is used solely for analytics, security monitoring, and service improvement.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Process your document generation requests using AI models
  • Process transactions through our payment provider (Paddle)
  • Manage your ticket-based purchases (Free Trial, Starter, Professional, Credit Pack)
  • Send transactional emails (confirmations, download links, account notifications)
  • Monitor and analyze usage patterns to improve the Service
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

4. Document Processing and AI

Your uploaded documents are processed by AI models to generate proposal content. We are transparent about how this works:

  • No training. Your documents are never used to train, fine-tune, or improve AI models. They are used exclusively to generate your requested output.
  • AI models. Free Trial proposals use Anthropic Claude Haiku 4.5. Paid proposals (Starter, Professional, Credit Pack) use Anthropic Claude Sonnet 4.6. These providers process your content under enterprise data processing terms, which prohibit using customer data for model training.
  • Temporary processing. Document content is held in memory during processing and is not persisted beyond what is necessary to deliver your results.

5. Data Retention

Uploaded files and generated outputs are retained for 14 days after creation to enable preview and re-downloads, after which they are automatically and permanently deleted from our storage systems.

Account information is retained for as long as your account is active. You may request account deletion at any time, after which we will delete your personal data within 30 days.

Purchase history is retained for 12 months and accessible through your Settings page.

Usage logs are retained for up to 90 days for security and analytics purposes, then automatically purged.

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS 1.2+
  • Files at rest are encrypted using AES-256 encryption
  • Access to production systems is restricted and audited
  • We use Row Level Security (RLS) to ensure users can only access their own data
  • Regular security reviews and dependency updates are performed

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — Database and authentication (hosted in AWS, data encrypted at rest)
  • Paddle — Payment processing as Merchant of Record
  • Anthropic (Claude API) — AI text generation (enterprise terms, no training on customer data)
  • AWS (EC2) — Cloud infrastructure hosting
  • Vercel — Frontend hosting and CDN

8. International Data Transfers

Our Service is operated from the Republic of Korea and cloud infrastructure in the Asia-Pacific region. If you access the Service from outside this region, please be aware that your data may be transferred to, stored, and processed in jurisdictions where our service providers operate. By using the Service, you consent to such transfers.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request correction of inaccurate personal data
  • Deletion — Request deletion of your personal data and account
  • Data portability — Request a machine-readable copy of your data
  • Restriction — Request restriction of processing of your personal data
  • Objection — Object to processing of your personal data

To exercise any of these rights, please contact us at support@propfill.co. We will respond within 30 days.

10. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies. Essential cookies cannot be disabled as they are necessary for the Service to function.

11. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to remove that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices:

Email: support@propfill.co