Privacy Policy

1. Introduction

Propcraft ("we," "our," or "us") operates the website at propcraft.app and provides invoicing, proposal generation, and financial management services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Propcraft, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information

When you register for an account and use our Service, we collect:

• Full name and email address
• Business name, address, and contact information
• GSTIN (Goods and Services Tax Identification Number)
• PAN (Permanent Account Number)
• Bank account details and UPI ID (for display on invoices)
• Business logo and branding assets

2.2 Client Data

When you create invoices and proposals, we store information about your clients including their name, email, company name, billing address, GSTIN, and payment history. You are responsible for ensuring you have the right to share this information with us.

2.3 Financial Data

We store invoice line items, amounts, tax calculations, payment statuses, proposal pricing, and related financial documents. This data is essential for the core functionality of the Service.

2.4 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, device information, browser type, IP address, and access timestamps.

3. How We Use Your Information

• To provide and maintain the Service, including generating invoices, proposals, and PDF documents
• To process and manage your account, including authentication and billing
• To send transactional emails such as invoice delivery, payment confirmations, and account notifications
• To calculate taxes including GST (CGST, SGST, IGST) based on your and your client's location
• To provide AI-powered features such as line item suggestions and proposal content generation
• To improve the Service through usage analytics and error tracking
• To respond to support requests and communicate with you about the Service
• To comply with legal obligations and enforce our Terms of Service

4. Third-Party Processors

We use the following third-party service providers to operate the Service. Each processes data only as necessary for their specific function:

5. Data Retention

We retain your personal information and financial data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law (such as tax records, which may be retained for up to 8 years as required by Indian tax regulations).

Invoice and proposal data created by you remains accessible as long as your account is active. Backup copies may persist in our systems for up to 90 days after deletion.

6. Data Security

We implement industry-standard security measures to protect your data, including 256-bit SSL/TLS encryption for all data in transit, encryption at rest for stored data, row-level security policies in our database to prevent unauthorized access, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete personal data
• Deletion — Request deletion of your personal data, subject to legal retention requirements
• Export — Request export of your data in a machine-readable format
• Withdraw Consent — Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at support@propcraft.app.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. You can control cookie settings through your browser, but disabling essential cookies may prevent the Service from functioning properly.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Hyderabad, Telangana, India.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.