Privacy Policy

Effective Date: June 05, 2025

PropelAI LLC (“Company,” “we,” “our”) provides a B2B SaaS platform that delivers AI-powered marketing insights, analytics, and data tools to help businesses make smarter decisions. We are committed to protecting the privacy of individuals who visit our website (“Visitors”) and organizations and their authorized users who access or use our products and services (“you,” “your,” or “Customers”). This Privacy Policy describes how we collect, use, disclose, and otherwise process information when you or your organization’s authorized Users access or use Company’s websites, platform, application-programming interfaces, Chrome/plug-in extensions, and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to these practices, you should not access or use the Services.

  1. KEY DEFINITIONS

    1. “AI Input” means any prompt, query, instruction, tag, file, data set, parameter or other content that Customer (including its Users) submits to, or configures within, the Service for the purpose of generating, analyzing or otherwise processing information through our Models.

    2. “AI Output” means any chart, insight, prediction, recommendation, text, image or other material generated autonomously or semi-autonomously by the Service.

    3. Biometric Information” means an individual's physiological, biological, or behavioral characteristics, including information about an individual's deoxyribonucleic acid (DNA), that is used or is intended to be used singly or with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

    4. Customer Data” means all electronic data or information submitted by Customer or its affiliates to and stored by the Service.

    5. “Model” means any algorithmic architecture, machine-learning system (including weights, parameters and prompts) or ensemble thereof that powers generation of AI Output.

    6. "Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules or regulations.

    7. Sensitive Personal Information” means Personal Data revealing a consumer's social security number, driver's license and passport numbers, account numbers and credentials, precise geolocation, racial or ethnic origin, religious beliefs, or union membership, Personal Data concerning a consumer's health, sex life, or sexual orientation, contents of a consumer's mail, email and text messages where the business is not the intended recipient, genetic data, biometric information, or citizenship and immigration status.

    8. Special Category Personal Information” means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs, or trade union membership; genetic and biometric data; and data concerning health, sex life or sexual orientation.

    9. Training Data” means Customer Data, AI Inputs or subsets thereof that Company accesses to train, fine-tune or otherwise improve our Models.

Capitalized terms not defined here have the meanings given in the Terms of Service.

  1. CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Policy from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Policy. If we make material changes to the way in which we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us, by posting notice of such changes on the Services, or by other means consistent with applicable law) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

  1. INFORMATION WE COLLECT

We collect limited Personal Data from visitors to our website in the following ways:

You may choose to provide us with the following types of information when interacting with the Services:

Please do not submit any Sensitive Personal Information, Biometric Information, or Special Category Personal Information through the Services, as we do not require or intend to process such information.

  1. Information Collected Automatically

We and our third-party service providers may automatically collect certain technical and usage-related information from your browser or device (“Usage Data”), including:

Please refer to Section 7 (Cookies & Other Tracking Technologies) for more information about how this data is collected and your choices.

  1. Information Collected from Third Parties

    We may obtain Personal Data about you from a variety of third-party sources in order to operate, improve, and personalize the Services we offer. These sources may include business partners, event organizers, advertising networks, API integrations (such as OpenAI, Google or Meta), data enrichment services, and publicly available sources.

    Service Providers and Business Data Vendors. We may receive professional or business contact information such as your name, job title, company, email address, phone number, and LinkedIn profile URL, from service providers that lawfully source such data. We use this information to deliver relevant product updates, service communications, and marketing tailored to business professionals who may benefit from our Services. All providers we engage are required to confirm they have obtained such data legally and, where applicable, with appropriate consent.

    Advertising and Marketing Partners. We work with marketing and advertising partners who may collect or share information about how you interact with our website, communications, advertisements, or event pages. This data helps us understand engagement, measure campaign effectiveness, and deliver relevant promotional content. Where required by law, we will obtain consent or honor opt-out preferences for such activities.

    Google API Services. If you choose to connect your Google account to our Services (for example, to log in or sync calendars), we may receive certain information from Google, such as your name, email address, and Google user ID to authenticate you and enable the requested integration. We do not use this information for any other purpose and do not share it externally except as necessary to provide the Services. Our use of data received from Google APIs is governed by Google’s Gemini API Additional Terms of Service and complies with the Google API Services User Data Policy, including the Limited Use requirements.

    Meta API Services. Our Services may also offer optional integrations with Meta platforms (e.g., Facebook, Instagram) via Meta’s APIs. If you choose to link a Meta account or authorize specific functionality (such as retrieving ad insights or user engagement data), we may receive limited personal or analytics-related information as permitted by Meta’s API settings. We use this data only to support the requested functionality and comply with Meta’s Platform Terms and Developer Policies. We do not use or disclose Meta-derived data for any unrelated purposes.

    OpenAI API Services. Our Services may include features powered by OpenAI’s APIs (e.g., to generate marketing insights, automate text analysis, or provide predictive analytics). If you use features that leverage OpenAI’s technology, certain data inputs such as text-based queries, prompts, or related metadata may be shared with OpenAI to facilitate processing and return results. We do not use OpenAI’s services to process Sensitive Personal Information, and we configure API use to exclude data that identifies you or your customers directly. All OpenAI usage is governed by OpenAI’s  Enterprise Privacy Policy and API Data Usage and Retention Policies, and we do not allow OpenAI to use your data to train its models. We implement safeguards to restrict the transfer of unnecessary Personal Data and comply with applicable data protection laws when using OpenAI’s services.

    Anthropic API Services. Our Services may include features powered by Anthropic’s APIs (e.g., to generate marketing insights, automate text analysis, or provide predictive analytics). If you use features that leverage Anthropic’s technology, certain data inputs such as text-based queries, prompts, or related metadata may be shared with Anthropic to facilitate processing and return results. We do not use Anthropic’s services to process Sensitive Personal Information, and we configure API use to exclude data that identifies you or your customers directly. All Anthropic usage is governed by Anthropic’s Privacy Policy and Model Training Notice, and we do not allow Anthropic to use your data to train its models. We implement safeguards to restrict the transfer of unnecessary Personal Data and comply with applicable data protection laws when using Anthropic’s services

    Public Sources. We may supplement information we collect with publicly available sources, such as corporate websites, news articles, or public directories, to support business contact validation, lead enrichment, or product relevance analysis.

  2. Email & Calendar Integrations

If you choose to sync a third-party email or calendar account (such as Gmail or Google Calendar) with the Services, we may access relevant contact and content data, including message and event metadata and content (“Email Service Information”). Notwithstanding anything else in this Privacy Policy, we use Email Service Information solely to provide the Services and do not use or disclose it to train or fine-tune our AI models. If you connect your Google account, we comply with the Google API Services User Data Policy, including its Limited Use requirements.

  1. Customer End User Data

This Privacy Policy does not apply to data that our Customers upload to the Services about their own end users (“Customer End User Data”). In such cases, we process that information solely on behalf of the Customer, and the Customer’s own privacy policy governs its collection and use. Customers are solely responsible for ensuring that any data they upload does not include Sensitive Personal Information, Biometric Information, or Special Category Personal Information, unless legally justified and permitted by contract.

The below chart is intended to satisfy the disclosure requirements of the California Consumer Privacy Act (as amended by the CPRA) and similar U.S. state privacy laws.

Category of Personal Data Examples Sources Purpose of Collection / Use Disclosed to Third Parties? Sold or Shared for Cross-Context Behavioral Advertising? Typical Retention Period*
Identifiers & Business Contact Info Name, work e-mail, company name, job title, phone, IP address, device ID Directly from you; automatically from browser/device; enrichment partners Account creation, security, service communications, billing, B2B marketing Yes – cloud-hosting, CRM, billing, analytics Limited. We may run account-based ads to existing or prospective customers; you can opt out.

As long as you maintain an account or 2 yrs of inactivity, then pseudonymized or deleted, unless longer needed for legal/archival purposes.

Where the user provides such information via the contact us form on our Website, we will retain such information for two (2) months.

Commercial Information Subscription tier, purchase history, support interactions Directly from you; inferred from usage Provide & support Service, usage analytics, upsell recommendations Yes – payment processor; customer-support tools No 7 yrs for accounting / tax compliance
Internet / Network Activity Log files, clickstream, pages viewed, interactions with emails or in-app messages Automatically from browser/device; cookies & SDKs Service functionality, performance, security, marketing analytics Yes – analytics & performance-monitoring providers No (we do not allow third-party trackers to profile across unaffiliated services) 6–24 months depending on cookie lifespan or until deleted
Customer Data & AI Inputs Datasets, prompts, CSV uploads, API payloads, tags, campaign metadata (may contain Personal Data you control) Directly from you / your systems Generate AI Output; provide Service; optional model-training/improvement (unless Private-Model add-on) No external disclosure except sub-processors (such as Google) that host or process on our behalf under strict confidentiality No Retained for contract term + 90 days back-up window, or deleted sooner at your request; derivative model weights retained unless you’ve opted-out
Inferences Audience segments, predicted engagement, propensity scores Derived internally from other data via ML models Personalize dashboards, benchmarking, product R&D No (used internally) No Until deletion request or no longer necessary for stated purposes
Sensitive Personal Information Payment-card PAN (tokenized), account log-ins Directly from you; stored by PCI-compliant processor Process payments; authenticate users Yes – payment processor only No 7 yrs for financial-recordkeeping
  1. HOW WE USE YOUR INFORMATION

We use the information described above to:

We use your information where necessary to:

We use your information for our legitimate business purposes, including to:

We use and disclose your Personal Data as needed to:

We may deidentify or anonymize Personal Data so that it cannot reasonably be used to identify you. We may use such deidentified information for any lawful purpose and will not attempt to reidentify it except as required to verify the effectiveness of our deidentification processes.

  1. Use Restrictions on Email & Calendar Data

We only use Email Service Information for the limited purpose of delivering and improving the relevant features of the Services. We do not use such information for advertising, analytics, or model training, and we do not disclose it except as required to deliver the Services or comply with legal obligations.

  1. Legal Basis for Processing Personal Data (GDPR)

    For individuals located in the European Economic Area (EEA) or the United Kingdom (UK), we process your Personal Data based on the following legal grounds:

  1. DISCLOSURE OF YOUR INFORMATION

We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties:

A current list of our subprocessors is available upon request. We will notify Customers of any material changes to our subprocessors in advance, as required by applicable law or contractual commitments.

We may also disclose your information as needed to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce any applicable terms of service, and to ensure the safety and security of our business, employees, and users. We do this in our legitimate interest to protect our Service and business and to comply with applicable law.

  1. THIRD PARTY WEBSITES AND SOCIAL FEATURES

Our Services may contain links to or integrations with third-party websites, applications, or platforms such as social media sites (e.g., Discord, LinkedIn, X/Twitter), embedded widgets, or promotional partners that are not owned or controlled by Company. These links are provided for your convenience only. Accessing those third-party properties is at your own risk, and your interactions with them are governed by their respective privacy policies and terms of service.

We are not responsible for the privacy, security, or data practices of any third party, including those operating websites or services linked to or from our Services. The inclusion of a link or integration does not constitute or imply endorsement of the linked site or service by Company.

If you post or share content on public or semi-public forums such as social media or community platforms through or in connection with our Services, that content may be visible to others without limitation and may be independently collected, copied, or used by the public or by users of those third-party platforms. We recommend that you exercise caution and avoid submitting personal or sensitive information in such forums.

We encourage you to review the privacy policies of any third-party site or service before interacting with it or sharing any Personal Data.

  1. COOKIES AND OTHER TRACKING TECHNOLOGIES

Company uses cookies, pixels, and similar tracking technologies to collect information about how you and your organization’s Users interact with our Services. This section explains what these technologies are, why we use them, the types we use, and how you can manage them.

What Are Cookies and Similar Technologies?

Why We Use These Technologies

We use cookies and related technologies to:

Some cookies are set by us (first-party cookies), while others are set by third-party service providers we partner with (third-party cookies).

Types of Cookies We Use

We group the cookies and similar technologies we use into the following categories:

How to Manage Cookies

You can control or delete cookies at any time through your browser settings. You may also opt out of certain third-party advertising cookies by visiting the Network Advertising Initiative (https://www.networkadvertising.org/choices) or the Digital Advertising Alliance (https://optout.aboutads.info).

To opt out of tracking by Google Analytics, click here.

Your browser settings may allow you to transmit a ‘do not track’ signal. Like many websites, our website is not designed to respond to such signals. To learn more about ‘do not track’ signals, you can visit http://www.allaboutdnt.com/

  1. CHILDREN’S PRIVACY

Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any Personal Data about children, particularly those under 13 years of age or in the case of a region where the minimum age for processing Personal Data differs, such different age. For users above the age of 13 but below the age where you are able to consent to the processing of your Personal Data, please obtain your parent or guardian’s consent prior to using the Services.

If we become aware that we have unknowingly collected information about a child under 13 years of age or the relevant minimum age in your jurisdiction, we will make commercially reasonable efforts to delete such information. If you are the parent or guardian of a child under the relevant minimum age who has provided us with their Personal Data, you may contact us using the below information to request that it be deleted. 

  1. DATA SECURITY AND RETENTION

We implement reasonable and appropriate administrative, technical, and physical safeguards designed to protect the Personal Data we collect and process. However, no system can be guaranteed to be completely secure, and we cannot ensure or warrant the absolute security of any information transmitted via the internet or stored on our systems. We recommend that you avoid transmitting sensitive or confidential information through unencrypted or unverified channels.

We retain Personal Data for as long as it is reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, enforce our agreements, maintain security, and protect our rights and the rights of others. In general, this means we may retain Personal Data indefinitely unless you request deletion, subject to applicable law and contractual commitments. However, where industry practice or customer expectations suggest periodic data minimization (such as a rolling 60-day deletion policy), we may choose to delete certain types of data earlier, particularly when it is no longer required for operational, legal, or business purposes.

Sensitive Personal Information, such as payment data or account log-in credentials, is protected using reasonable security measures appropriate to the nature of the data and risks involved.

Data Retention Periods

We retain Personal Data for the following periods:

As our Services are not intended for the processing of Sensitive Personal Information, Biometric Information, or Special Category Personal Information, we discourage the submission of such data and reserve the right to delete it where feasible Sensitive Personal Information, Biometric Information, or Special Category Personal Information, as defined by applicable law, are subject to enhanced safeguards. These may include encryption, limited access, and secure handling procedures designed to reduce the risk of unauthorized use or disclosure.

You may request deletion of your Personal Data at any time by contacting us at privacy@propelai.io, and we will respond in accordance with applicable data protection laws.

  1. U.S. RESIDENTS

This section supplements the other sections of this Privacy Policy and applies to you only if you are a resident of California or another U.S. state that has passed a privacy law similar to the California Consumer Privacy Act (“CCPA”) that applies to us, and the law requires specific privacy notice disclosures. For purposes of this section, references to “personal information” shall include “sensitive personal information,” as these terms are defined under the CCPA.

Processing of Personal Information

In the preceding 12 months, we collected and disclosed for a business purpose the following categories of personal information and sensitive personal information about residents:

The specific business or commercial purposes for which we have collected and disclosed your personal information and the categories of sources from which we collect your personal information are described in the section above, titled Collection and Use Your Information. The third parties that we have disclosed your information to are described in Section 4 (Disclosure of Your Information) above. We only use and disclose sensitive personal information for the purposes specified in the CCPA or otherwise in line with your consent. The criteria we use to determine how long to retain your personal information is described in the section above, titled Data Security and Retention. 

Selling and/or Sharing of Personal Information 

We do not “sell” or “share” (as those terms are defined under the CCPA) personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we “sell” or “share” personal information of residents under 16 years of age. 

California Account Holders Under 18

Any California residents under the age of eighteen (18) who have registered to use the Services and who have posted content or information available to others on the Services can request that such information be removed from the Services by contacting us at the e-mail address set forth in the section below, How to Contact Us. Such request must state that they personally posted such content or information and detail where the content or information is posted. We will make reasonable good faith efforts to remove the post from prospective public view or anonymize it so the resident cannot be individually identified. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished the post, and archived copies of it may be stored by search engines and other parties that we do not control.

Your Rights and Privacy Choices

Certain U.S. state laws provide residents with the right to opt out of the “sale” or “sharing” of their personal information, including through the use of third-party cookies and tracking technologies used for cross-site behavioral advertising or similar purposes.

If you are a resident of one of the following states, you have the right to opt out of such processing:

How to Opt-Out

These laws allow you to opt out of the sale or sharing of your personal information with third parties for purposes such as cross-context behavioral advertising. If you are accessing this website from one of the eligible states listed above, you may email us at privacy@propelai.io with the subject line “Opt-Out” and direct us to stop the sale or sharing of your personal information, including for targeted advertising purposes, as defined by applicable state laws.

Important Note

If you are not a resident of the states listed above, you may not be eligible to exercise these specific opt-out rights. However, we are committed to respecting your privacy preferences and encourage you to review the rest of this Privacy Policy for more information about your choices.

  1. DATA HOSTING AND TRANSFERS

We host and process data using leading cloud infrastructure providers, such as Amazon Web Services (AWS) and/or Google Cloud Platform (GCP), with data centers primarily located in the United States. These providers are contractually obligated to implement appropriate technical and organizational safeguards and may only process Personal Data on our behalf and in accordance with this Privacy Policy.

We may transfer your Personal Data to countries outside of your jurisdiction of residence, including to the United States, for the purposes of operating and providing our Services. Where such transfers occur, we implement appropriate safeguards as required under applicable data protection laws. For example, for data transferred from the European Economic Area (EEA), United Kingdom (UK), or Gibraltar, we rely on the European Commission’s Standard Contractual Clauses (SCCs), the UK’s International Data Transfer Agreement or Addendum, or other approved transfer mechanisms, unless the destination country has been deemed adequate by the relevant authority.

If you would like more information about our data transfer practices or to request a copy of the relevant safeguards, please contact us at privacy@propelai.io.

  1. YOUR RIGHTS AND CHOICES

Depending on where you live, you may have some or all of the rights listed below in relation to Personal Data that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. 

You may choose to stop receiving personalized advertising or marketing promotions from us when using the Services by contacting us at our email address provided below.

You may exercise any of these rights by contacting us using the information provided below. We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address and government issued ID, before providing a substantive response to the request. You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. If we deny your request, you may appeal our decision by contacting us using the information provided below. You may opt out of information collection for AI (which would prohibit us from using your search information to improve our AI models) in your settings page if you are logged into the Services. You may also request to delete your account through the settings page or by contacting us at privacy@propelai.io. If you delete your account, we aim to delete your Personal Data from our servers within 30 days. Please contact us at privacy@propelai.io to request deletion. 

  1. COMPLAINTS

If you have complaints about how we process your Personal Data, please contact us at privacy@propelai.io and/or your local representative’s contact details as set out above, and we will respond to your request as soon as possible.

If you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the country in which you live or work or where you think we have infringed data protection laws, or with the UK Information Commissioner’s Office, or other relevant data protection authority as applicable to you. 

  1. HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@propelai.io and/or your local representative’s contact details as set out above. 

  1. LANGUAGE

Except as otherwise prescribed by applicable law, in the event of any inconsistency between the English language version and local language version of this Privacy Policy, the English language version will prevail.