Privacy Policy

Last updated: August 2026

This policy is written to describe accurately what the Service actually does today. It has not yet had a full review by a qualified privacy/data-protection lawyer -- treat it as a good-faith, factual description rather than a substitute for that review.

This Privacy Policy explains how CivilProposals ("we", "us", "our") collects, uses, and protects information when you use civilproposals.com and app.civilproposals.com (together, the "Service").

Information we collect

We collect the following categories of information:

Account information: your name, work email, firm name, and password when you sign up.
Content you upload: tender briefs, company profiles, CVs, past proposals, and any other documents you provide so the Service can generate a draft proposal.
Payment information: handled directly by our payment processor, Stripe. We do not store your full card details on our own servers.
Usage data: basic log data such as browser type, device information, and how you interact with the Service, used to keep it running reliably and to fix problems.

How we use your information

We use the information above to:

Provide, operate, and maintain the Service, including generating draft proposal content from the documents you upload.
Process payments and manage your subscription or pay-as-you-go balance.
Respond to support requests and other communications you send us.
Improve the Service and understand how it's being used.

How your content is processed by AI

To generate a draft, the text of the documents you upload is sent to Anthropic (Claude), the AI provider that powers CivilProposals, for processing. We don't sell your content, and neither we nor Anthropic use it to train models. Review Anthropic's own privacy policy for how they handle data sent to their API, since that processing happens on their infrastructure, not ours.

Who we share information with

We share information only where necessary to run the Service, with these subprocessors:

Stripe, to process payments.
Anthropic, to generate draft content (see above).
Railway, which hosts the application and its database.
Cloudflare, which hosts civilproposals.com and handles DNS/CDN for the Service.
Resend, which sends transactional emails on our behalf (account emails like signup confirmation, payment receipts, and password resets; and, if you use the landing page's sign-up form, the lead-capture confirmation described in "Marketing communications" below).

We do not sell your personal information to third parties.

Marketing communications

The "Get proposal-writing tips" form on the landing page is separate from your account: it only captures the email address you submit, to send a one-time confirmation and, occasionally, future updates about the product. If you never use this form, submitting a tender brief or creating an account doesn't add you to it. You can opt out at any time by replying to any email we send from it, or by emailing hello@civilproposals.com -- we'll remove you from future sends.

Data retention

We keep your account information and uploaded content for as long as your account is active, or as needed to provide the Service. You can request deletion of your account and associated data at any time by contacting us.

Your rights

Depending on where you're located, you may have the right to access, correct, export, or delete your personal information. To exercise any of these rights, contact us using the details below.

CivilProposals operates under Queensland, Australia law (see our Terms of Service), and we handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you're located outside Australia, your local privacy law (e.g. the EU/UK GDPR) may give you additional or different rights -- contact us and we'll do our best to accommodate them.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Cookies

See our Cookie Policy for details on the cookies used by the Service.

Children's privacy

The Service is intended for business use and is not directed at children.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.

Contact us

Questions about this Privacy Policy? Email us at hello@civilproposals.com.