Privacy Policy

Last updated: September 2026

This is a plain-language template describing how ProposalCraft actually handles data. It is not legal advice. Have it reviewed by a qualified professional and adapt it (including a real contact address) before relying on it.

The short version

The job posts, your background, and the proposals we generate are never stored. There are no accounts or logins. We keep only a small amount of non-identifying metadata, and — if you buy credits — the email you paid with, so we can send a receipt and let you restore your credits later.

Anonymous sessions

When you first use the tool we create an anonymous session and set one signed, httpOnly cookie to remember it. This cookie holds no personal information — it only links your browser to a credit balance. There is no ad or third-party tracking cookie.

What we do not store

The text you paste — the job post, your profile, any writing sample — and the generated proposal are processed to produce your result and are not retained. We do not keep them on our servers.

What we do store

  • Metadata-only records, so we can improve the product: the detected language, word count, whether a gap was found, which refine actions were used, and a one-way hash of the proposal (which cannot be turned back into the text). No proposal, job, or profile text is ever included.
  • Outcome records: if you tell us whether a proposal got a reply or won the job, we store just that yes/no answer against the metadata above.
  • Your credit balance, tied to the anonymous session.
  • Your email — only if you purchase — used solely to send the receipt and to restore your credits on a new device. It is not used for marketing.

Where your data lives

  • Database: hosted in the EU (Neon, Frankfurt).
  • Analytics: PostHog, EU-hosted (eu.i.posthog.com). We fire only a short list of explicit product events with minimal properties (like language and word count). Autocapture and session recording are turned off, and we never send any job, profile, or proposal text, or your email, to analytics.
  • Payments: handled by Stripe. Your card details go straight to Stripe — we never see or store them.
  • AI processing: your inputs are sent to our model provider to generate the proposal in real time and are not stored by us.

Requesting deletion

Because sessions are anonymous, most data isn’t tied to your identity. If you purchased and want your email and purchase records removed, contact us using the email address on your Stripe receipt and we’ll delete them. Clearing your browser cookies also detaches your session on this device.