Privacy Policy
Last updated: July 9, 2026
1. Information We Collect
We collect information you provide directly: your name, email address, business name, and billing information when you register or upgrade. We also collect proposal content you create, client names and emails you enter, and usage data such as login times and feature interactions.
2. How We Use Your Information
We use your information to: provide and improve the Service; send transactional emails (proposal delivery, notifications, receipts); process payments via Stripe; authenticate your account; and respond to support requests. We do not sell your personal data to third parties.
3. AI Processing
When you use the AI proposal generator, your project brief is sent to Anthropic's Claude API to generate proposal content. Anthropic's data handling is governed by their own privacy policy. We do not store your briefs beyond what is saved in your Penly.it account.
4. Email Delivery
Proposal emails are sent via Resend. Your clients' email addresses are transmitted to Resend solely to deliver proposals you explicitly send. We do not use client email addresses for any marketing purposes.
5. Payments
Payment processing is handled by Stripe. Penly.it does not store your credit card number or full payment details. Stripe's privacy policy governs the handling of your payment information.
6. Data Storage & Security
Your data is stored in Supabase (PostgreSQL database) hosted on AWS infrastructure in the US East region. All data is encrypted at rest and in transit using industry-standard encryption (TLS 1.2+). We apply row-level access controls so your data is only accessible to you, and we use rate limiting and input validation to protect the Service against abuse. No method of transmission or storage is 100% secure, but we take reasonable measures to safeguard your information.
7. Data Retention
We retain your account data for as long as your account is active. When you delete your account (from Settings → Danger Zone), your account and all associated data — including your proposals and the client details contained within them, your brand kit, and any affiliate or team records — are permanently and immediately deleted from our systems, and any active subscription is cancelled. We may retain limited records where required by law or for fraud prevention (for example, transaction records held by our payment processor, Stripe).
8. Cookies
Penly.it uses session cookies for authentication purposes only. We do not use tracking cookies or third-party advertising cookies.
9. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can view and update your profile information from the Settings page. You can permanently delete your account and all associated data yourself at any time from Settings → Danger Zone — deletion takes effect immediately and cannot be undone. For a full data export, or if you need help exercising any of these rights, email us at support@penly.it.com.
10. Children's Privacy
Penly.it is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the Service.
12. Contact
For privacy questions or requests, contact us at support@penly.it.com.