Privacy Policy

We collect information you provide directly, including your name, email, company, and payment details. We also collect proposal content you create, client information entered into proposals, and usage data such as proposal views and interactions. Automatically collected data includes IP address, browser type, and device information for security and analytics purposes.

Your proposals and client data are treated as strictly confidential. We employ industry-standard encryption (AES-256 at rest, TLS 1.2+ in transit) to protect all document content. Access to your proposal data is restricted to authorized personnel who require it for service operation. We do not share, sell, or rent your proposal content to third parties under any circumstances. Your proposals are private and accessible only to you and recipients you designate via share links.

When you use our AI proposal generation feature, your input data (client info, project details, scope) is processed by our AI models to generate proposal content. This processing occurs in real-time and your data is not stored on the AI model's servers after generation is complete. We do not use your proposal content to train our AI models without explicit consent. Enterprise customers may opt into custom model training using their historical proposals; this data is isolated and used only for that customer's custom model. You may opt out of any data processing for AI improvement at any time from your account settings.

We implement comprehensive security measures including: end-to-end encryption for all data transmissions; AES-256 encryption for data at rest; multi-factor authentication for account access; regular security audits and penetration testing; SOC 2 Type II compliance; and strict access controls with audit logging. Our infrastructure is hosted on certified cloud providers with physical security controls. In the event of a data breach, we will notify affected users within 72 hours in accordance with applicable regulations.

We retain your proposal data for as long as your account is active. Upon account deletion, we permanently delete all your proposals, client data, and associated content within 30 days. During this retention period, you may export your data. Analytics and usage data may be retained in anonymized form for up to 24 months for service improvement purposes. Payment records are retained as required by tax and financial regulations.

You have the right to: access your personal data; export your proposals and account data; correct inaccurate information; delete your account and all associated data; object to processing of your data; and withdraw consent for AI data processing. To exercise these rights, contact us through the Support page. We respond to all requests within 30 days.

We use third-party services for payment processing (Stripe), email delivery, and cloud infrastructure. These providers have their own privacy policies and are bound by data processing agreements with AnchorPitch. We only share the minimum data necessary for these services to function. We do not use third-party advertising or tracking cookies that sell your data.

Electronic signatures collected through proposals are stored securely with a timestamp, signer name, and signature image. This data is retained as part of the proposal record for legal and audit purposes. Signature data is only accessible to the proposal owner and the signer. We maintain an audit trail of signature events for dispute resolution purposes.