Privacy Policy

1. Who we are

Right Proposals is a software product developed and operated by Codingkart IT Services Private Limited, a company incorporated in India (“we”, “us”, “our”). The service is available at rightproposals.com. For any privacy questions, contact us at info@rightproposals.com.

2. What we collect

Information you give us

• Email address — when you join the waitlist or create an account
• Brand profile — your company name, logo, services, rates, and tone of voice, used to personalise your proposals
• Project briefs — the 2-sentence descriptions you submit to generate proposals
• Payment details — handled entirely by Stripe; we never see or store your card number

Information collected automatically

• Usage data — which features you use, proposals generated, PDFs exported
• Device and browser data — browser type, OS, screen size, IP address
• Marketing attribution — UTM parameters (source, medium, campaign) and referrer URL when you arrive from a link

Proposal tracking data

When you send a proposal to a client using a Right Proposals tracking link, we record when it was opened and how many times. This powers the real-time tracking in your dashboard. We collect no information about your client beyond the open event itself.

3. How we use it

• To generate AI proposals using your brand profile and brief as context
• To run and improve the Right Proposals service
• To send transactional emails (account, billing, proposal open alerts)
• To send product updates and marketing emails — unsubscribe any time
• To understand which marketing channels are driving signups
• To process payments via Stripe
• To comply with legal obligations

4. AI processing

Right Proposals uses the Anthropic Claude API to generate proposal content. When you submit a brief, we send your brief and brand profile to Anthropic for processing. Anthropic handles this data under their own Privacy Policy.

We do not use your data to train AI models, and Anthropic’s API terms prohibit using customer data for model training without explicit consent.

5. Who we share data with

We do not sell your data. We share it only with service providers that help us operate:

• Anthropic — AI proposal generation
• Supabase — database and user authentication
• Stripe — payment processing
• Resend — transactional email
• Klaviyo — marketing email and waitlist
• Vercel / AWS — hosting and PDF generation
• Plausible Analytics — cookie-free, privacy-first web analytics
• Google Analytics 4 — traffic and conversion analytics

We may also disclose information if required by law or valid legal process.

6. Cookies

Our marketing site uses Plausible Analytics, which is entirely cookie-free and requires no consent. We also use Google Analytics 4 which sets cookies for traffic measurement — these are only activated after you provide consent via our cookie banner. Inside the app (post-login), we use session cookies strictly necessary for authentication; these do not require consent under UK GDPR and PECR. We do not use advertising or third-party tracking cookies.

You can withdraw cookie consent at any time by clicking “Cookie settings” in the footer. Declining analytics cookies does not affect your use of the service.

7. International data transfers

Codingkart IT Services Private Limited is based in India. When you use Right Proposals, your data may be transferred to and processed in India, the United States, and other countries where our service providers operate (including Anthropic, Supabase, Stripe, Resend, and Vercel).

Where required by UK GDPR or Australian privacy law, we ensure appropriate safeguards are in place for these transfers, including reliance on standard contractual clauses or the data protection frameworks of our service providers.

8. How long we keep data

• Waitlist emails — until you unsubscribe or request deletion
• Account and proposal data — while your account is active, plus 90 days after deletion
• Payment records — 7 years, as required by financial regulations
• Analytics data — aggregated and anonymised, no time limit

9. Your rights

You have the right to access, correct, delete, or export your personal data. You can also object to marketing at any time using the unsubscribe link in any email we send.

To exercise any of these rights, email info@rightproposals.com. We will respond within 30 days.

10. Security

All data is transmitted over HTTPS. Database access is protected by row-level security. Payments never touch our servers. If you discover a security issue, please email us immediately at info@rightproposals.com.

11. Children

Right Proposals is a business tool for adults. We do not knowingly collect data from anyone under 16. If you believe we have done so inadvertently, please contact us immediately.

12. Changes to this policy

We will notify active users of material changes via email at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the current version.

13. Contact

Codingkart IT Services Private Limited
Trading as: Right Proposals
Email: info@rightproposals.com
Website: rightproposals.com