Privacy Policy
How we collect, use, and protect your personal information.
Last updated: February 14, 2026
01
Introduction
Projectory AI (“Projectory,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.projectory.ai and use our AI-powered proposal management platform (collectively, the “Services”).
This policy applies to information collected through our website, web application, APIs, and any related services. By using our Services, you consent to the data practices described in this policy.
02
Information We Collect
Information You Provide Directly
- Account Information: Name, email address, company name, job title, and phone number when you create an account or contact us.
- Proposal Content: Documents, solicitations, proposal drafts, past performance narratives, and other content you upload to the platform.
- Payment Information: Billing address and payment method details processed through our secure payment provider.
- Communications: Messages you send to us through contact forms, email, or chat support.
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform, and interaction patterns.
- Device Information: Browser type, operating system, device type, screen resolution, and IP address.
- Cookies: We use cookies, web beacons, and similar technologies to enhance your experience. See our Cookie Policy for details.
03
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process your proposals and generate AI-assisted content
- Manage your account and provide customer support
- Send you service-related communications and updates
- Analyze usage patterns to improve our platform
- Ensure the security and integrity of our Services
- Comply with legal obligations
04
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, our legal basis for processing your personal data includes:
- Contract: Processing necessary to perform our contract with you (providing the Services).
- Consent: Where you have given consent for specific processing activities (such as marketing communications and non-essential cookies).
- Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our Services and preventing fraud.
- Legal Obligation: Processing necessary to comply with applicable laws and regulations.
05
Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service Providers: Third-party vendors who help us operate our Services (cloud hosting, analytics, payment processing).
- AI Processing: Your uploaded documents are processed by our AI models to extract requirements and generate proposal content. This processing occurs in secure, encrypted environments.
- Legal Requirements: When required by law, subpoena, or other legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
06
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you Services:
- Account Data: Retained while your account is active and for 30 days after deletion.
- Proposal Content: Retained according to your subscription plan settings. You can delete content at any time.
- Usage Data: Retained in anonymized form for up to 24 months for analytics purposes.
- Communications: Retained for up to 36 months for support and compliance purposes.
07
International Data Transfers
Your information may be transferred to and processed in the United States. For government contractor clients requiring data residency, we offer deployment options in AWS GovCloud and other sovereign cloud environments. We implement appropriate safeguards for international transfers, including Standard Contractual Clauses where required.
08
Your Rights
GDPR Rights (EEA Residents)
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
CCPA Rights (California Residents)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at privacy@projectory.ai.
09
Security
We implement industry-standard security measures to protect your information, including encryption at rest and in transit, role-based access controls, audit logging, and regular security assessments. For government and defense clients, we support deployment in GovCloud, Secret, and Top Secret Cloud environments with appropriate security controls.
10
Children’s Privacy
Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.
11
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new “Last updated” date.
12
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: privacy@projectory.ai
Address: Projectory AI, United States