Privacy & data
How your proposal data is handled
Plain-language notes on AI prompts, share links, local storage, webhooks, client sign-off, and deleting your account—so you know what leaves your browser and what stays under your control.
A fast yes with an audit trail in email—not a replacement for counsel, DocuSign, or procurement-grade e-sign.
Who sign-off is for
Freelancers and agencies on trust-based closes—typically deals under ~$500k where you need a clear go-ahead, not a legal war room.
Who should use e-sign instead
Legal, procurement, or enterprise buyers who need DocuSign, clause negotiation, or payment capture—use your e-sign and billing stack for that.
At a glance
- Draft content is sent to the AI provider only when you generate or rewrite.
- Share link snapshots expire (7 days by default); optional PINs gate access.
- Browser storage stays local until you sign in and save to the cloud.
- Client sign-off is a lightweight yes with email audit trail—not legal e-sign.
- You can delete your account from Account & data in the user menu; Pro billing ends immediately.
AI generation
When live AI is enabled, your form fields are sent to the AI model to produce the first draft. We don't need your full proposal history—only what's required to generate the content you request.
Share links
When you create a share link, we store a snapshot of that proposal on the server so your client can open the hosted page. The link stops working when it expires—by default after 7 days. That applies only to the shared snapshot, not to a copy you saved in your account library. You can reactivate the same link from your client pipeline without regenerating the proposal. Optional PINs add a simple access gate; they are not enterprise-grade security. Avoid putting highly sensitive data in shared links.
On this device
History, templates, usage counters, and export preferences are saved in your browser on this device. Clearing your browser data removes them. They are not synced to your account unless you sign in.
Webhooks
The app can send lightweight events (like "proposal generated" or "proposal shared") to connected tools. These events avoid sending the full proposal body by default.
Client sign-off
Pro share links let clients confirm scope and intent (name and email) with confirmation emails to you and your client—a lightweight sign-off for SMB deals, not a substitute for counsel or DocuSign. Use your e-sign vendor when contracts require formal execution.
Deleting your account
Signed-in users can permanently delete their account from Account & data in the user menu (or from billing in the library). That immediately cancels an active Pro subscription in Stripe, removes your cloud library, templates, branding, share links, usage records, and team workspaces you own, and deletes the sign-in profile. Browser-only drafts on this device are cleared at the same time. This cannot be undone.
Questions about Pro or share links?
The FAQ covers client portal features, limits, and how delivery works.