Introduction
This Privacy Policy explains how Proposly ("we", "us") collects, uses, and protects personal data when you use proposly.app and its related apps (the "Service"). It is written to align with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations issued by the Saudi Data & AI Authority (SDAIA).
Bawabat Al-Afkar Information Technology Est. (مؤسسة بوابة الأفكار لتقنية المعلومات), Unified Number 7014125541, with its registered address at Makkah Al-Mukarramah, Kingdom of Saudi Arabia, is the data controller for the purposes of this policy.
Data We Collect
Account data: name, email, phone number, company name, and password (stored securely, never in plain text).
Business content: proposals, quotations, invoices, client records, and any files you upload to create them.
Usage data: pages visited, actions taken inside the app, device and browser information, and IP address.
Payment data: subscription and billing details. Card details themselves are processed by our payment gateway partner and are not stored on our servers.
How We Use Your Data
We use personal data to: provide and operate the Service, generate and send proposals/quotations/invoices (including ZATCA-compliant e-invoices), process payments, provide customer support, secure the platform against fraud and abuse, and send service-related communications.
We do not sell personal data to third parties.
Sharing With Third Parties
We share data with a limited number of service providers who help us run the platform: MyFatoorah (our payment gateway), which processes subscription payments, and Hetzner (Germany), which hosts our servers and data. These providers are contractually required to protect your data and use it only for the service they provide us.
We may disclose data when required by Saudi law or a valid order from a competent authority.
Cross-Border Data Transfers
Our servers are hosted with Hetzner in Germany, within the European Union, under Hetzner's EU hosting terms and the EU's General Data Protection Regulation (GDPR) framework. This means personal data is processed and stored outside the Kingdom of Saudi Arabia. This transfer relies on Germany's recognized GDPR data protection framework together with Hetzner's standard data processing agreement, in line with the PDPL Implementing Regulations on cross-border data transfer.
Data Retention
We retain personal data for as long as your account is active, and for 6 years afterward to meet accounting, tax (ZATCA), and legal obligations, after which it is securely deleted or anonymized.
Your Rights Under the PDPL
You have the right to know what data we hold about you, request a copy of it, request correction of inaccurate data, request deletion, and withdraw any consent you previously gave — subject to legal and contractual exceptions.
To exercise any of these rights, contact us through the details below. You may also file a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your rights have been violated.
Data Security
We apply technical and organizational safeguards — including encryption in transit, access controls, and restricted internal access — to protect your data. No system is completely secure, and we continuously work to strengthen these protections.
Cookies
We use essential and preference cookies (such as language and theme settings). See our separate Cookie Policy for full details.
Contact Us About Privacy
For any privacy-related question or request, reach us at info@proposly.app or through our Contact us page.
Changes to This Policy
We may update this policy from time to time. Material changes will be highlighted on this page.