Privacy policy

This policy covers the EngiProse website and the EngiProse application. EngiProse collects personal information in two places: the invitation request form on this site, and the application itself.

When you request an invitation, we collect the full name, work email address, and company you enter, along with anything you write in the optional message field. We use it to reply to you and to run the early access program.

When you sign in to the application, we collect your name and your email address, plus a profile identifier from Google or Microsoft if you choose to sign in with one of those accounts. We use it to create and recognize your account. We never receive your Google or Microsoft password.

Using the application also stores what you put into it: proposals, documents you upload, and the text you write. That content is yours and stays yours, which is set out in the terms of service, and it is protected under this policy the same way your account details are.

EngiProse uses a small number of service providers to run the product. Each one receives only what it needs to do its job.

• Google and Microsoft, as identity providers. When you choose to sign in with one of them, they confirm the sign-in and pass us your name, email address, and a profile identifier.
• Stripe, as our payment processor. Card details are entered with Stripe, and card numbers never reach EngiProse.
• Mailjet, for transactional email such as sign-in links and account messages.
• Cloudflare, which serves this site, provides its cookieless analytics, and runs the Turnstile check that keeps automated submissions off the invitation request form.
• Supabase, which hosts the application database where your account and your proposal content are stored.
• AI model providers, currently OpenAI, which process the proposal and RFP content you put through the drafting features in order to generate drafts and match requirements.

This site shows no cookie banner, because there is nothing on it to consent to. Our analytics are cookieless: they count page views without identifying you and without following you to other sites. The Turnstile check on the invitation request form runs without pre-clearance, so it does nothing until you interact with the form.

When you submit the invitation request form, we store a salted, one-way hash of your IP address to enforce a short rate limit. The hash cannot be turned back into your address and is never linked to the information you send us. It is cleared in the normal course of operation once it is at least an hour old, and, like everything else we hold, it is deleted on request through the support portal.

The application sets one cookie, and it is the sign-in cookie that keeps you logged in. It is scoped to the application host alone and is never set on this site.

EngiProse does not respond to Do Not Track signals; the site sets no tracking cookies and its analytics are cookieless.

Interest registration records are kept while the early access program runs and are deleted on request through the support portal.

Ask through the support portal and we will tell you what we hold about you, correct anything that is wrong, or delete it. Deletion requests are honored. If we have to keep a record for tax or accounting reasons, we will say so when we answer you and delete the rest.

When this policy changes, we post the updated version on this page with a new effective date. The date at the top of this page is always the date of the version you are reading.

Questions about this policy, or about the information EngiProse holds about you, go through the support portal, and a person answers them. We publish no email address and no postal address, so the portal is the way to reach us.