Privacy Policy

1. Data we collect about you (account holders)

Account data: name, email, authentication details, workspace and team membership.

Usage and technical data: log data, IP address, device and browser information, and actions in the dashboard, used for security and to improve the Service.

Billing data, if you buy a paid plan, is handled by our payment provider; we do not store full card numbers.

2. Data we process for you (your end users)

When you install the SDK, you decide what to send: typically a user identifier and attributes (traits) such as plan or role, plus page context and events (for example views, clicks, survey answers and checklist progress).

We use it only to evaluate targeting rules, deliver the right content, record interactions and show you analytics. We do not sell it or use it for our own advertising. Please do not send sensitive data (health, government IDs, payment credentials) unless you have agreed this with us.

3. Push notifications and cookies

If you enable web push, we store the subscription details the browser provides and encrypt the keys used to send notifications. The SDK stores minimal identifiers in the browser (local storage) to remember what each user has seen. The marketing site uses only what is necessary to operate.

4. How we use data and legal bases

To provide and secure the Service (contract and legitimate interests); to communicate with you about your account (contract); to improve and troubleshoot the product (legitimate interests); and to comply with legal obligations.

5. Sharing and sub-processors

We share data only with providers needed to run Proly, such as cloud hosting, managed database, authentication, file storage, email and error monitoring, under contractual safeguards. We may disclose data if required by law. If the company is involved in a merger or sale, data may transfer to the successor under this policy.

6. International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

We keep account data while your account is active and for a limited period afterwards for legal and security reasons. Customer Data is deleted or returned within a reasonable period after you delete it or close your workspace, except where we must retain it by law. Backups are overwritten on a rolling schedule.

8. Security

We use encryption in transit, encryption of sensitive secrets at rest, access controls and tenant isolation. No system is perfectly secure; we will notify affected customers of a breach as required by law.

9. Your rights

Depending on where you live (for example under Chile's Law 19.628, the GDPR or similar laws) you may request access, correction, deletion, portability, objection or restriction of your personal data. Write to us to exercise these rights.

If you are an end user of one of our customers, please contact that customer first; we will help them respond.

10. Children

Proly is not directed to children and we do not knowingly collect their data for our own purposes.

11. Changes

We will post updates here and, if the change is material, notify you in the dashboard or by email.