Privacy Policy

1. Introduction

Prastav is a cloud-based proposal management platform for growing businesses. It helps teams manage customers, products, services, templates, pricing, documents, follow-ups, and proposal workflows in one place. We respect privacy and aim to handle information transparently and securely.

2. Scope of this Privacy Policy

This policy applies to the Prastav marketing website, Prastav application, APIs, account flows, checkout flows, support communications, integrations, and related cloud services. It does not apply to third-party websites or services that Prastav does not control.

4. Information we collect

We collect information needed to provide, secure, bill, support, and improve Prastav. This may include account data, workspace data, proposal and customer workflow data, billing metadata, support communications, device data, logs, usage data, integration data, and information entered or uploaded by users.

5. Information users provide

Users may provide names, email addresses, mobile numbers, workspace names, business profile details, customer records, product and service catalogs, proposal content, uploaded files, notes, settings, and other information entered into Prastav.

6. Account, workspace, and team information

We process account identifiers, authentication information, user profile information, workspace memberships, roles, permissions, security settings, language preferences, time zone preferences, and related administration records.

7. Proposal, customer, and business data

Prastav stores proposal drafts, proposal versions, product selections, service selections, pricing inputs, template structures, customer and prospect details, business records, communications context, attachments, and workflow history that users choose to manage in their workspace.

8. Billing and subscription information

We process subscription plan selections, checkout records, offer or coupon metadata, tax and invoice-related information, payment status, transaction references, and related operational records. Payment providers may process payment details under their own terms and policies.

9. Support, sales, and communications data

If you contact us at sales@prastav.io, support@prastav.io, by phone, or through WhatsApp, we may process your message, contact details, request context, diagnostic details, and follow-up communications so we can respond, investigate issues, and improve service quality.

10. Device, log, usage, and security data

We may collect IP address, browser, operating system, device type, session identifiers, request metadata, timestamps, authentication events, errors, audit records, and security signals to operate, troubleshoot, secure, and monitor Prastav.

11. Cookies, browser storage, and analytics

The marketing website uses necessary browser storage for consent choices and may use optional preference storage for theme, language, and currency. The marketing website may use Google Analytics to understand aggregate website usage only when analytics storage is accepted. The application may use cookies or storage for authentication, security, localization, and session continuity. See the Cookie Policy for details.

12. Integrations and third-party services

Prastav may integrate with Google Places, Google Contacts through the Google People API, Microsoft Graph contacts, Microsoft Graph email, payment gateways, SMS providers, hosting providers, storage providers, and OpenAI-compatible AI providers when those features are configured or connected. When users connect third-party accounts, we process the information needed to provide the requested integration.

13. Google API / Google user data, if applicable

If you connect a Google account, Prastav may request read-only Google Contacts access through the Google People API to display, import, match, and update customer contact records inside your Prastav workspace. Imported data may include names, email addresses, phone numbers, organizations, job titles, departments, notes, and related contact metadata returned by Google.

Prastav's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Prastav does not use Google user data for advertising and does not sell Google user data. Google contact sync is read-only: Prastav does not write back to Google Contacts, does not import Google Other Contacts, and does not import Google Workspace Directory users unless a separate feature clearly states otherwise.

14. How we use information

We use information to provide Prastav, authenticate users, manage workspaces, generate and track proposals, calculate and verify pricing workflows, operate subscriptions, support integrations, respond to support requests, prevent abuse, troubleshoot issues, improve reliability, and comply with legal obligations.

15. How we share information

We do not sell personal information. We may share information with service providers, subprocessors, integration providers selected by users, payment providers, professional advisers, authorities when legally required, or other parties when needed to protect Prastav, users, or the public.

17. International transfers

Prastav cloud services and providers may process information in countries other than the country where you are located. Processing locations depend on the hosting, database, integration, payment, SMS, email, analytics, and AI providers used for the relevant feature. Where required, we use appropriate safeguards for cross-border transfers.

18. Data retention

We retain information for as long as needed to provide the service, maintain security and audit records, support legal and business requirements, resolve disputes, enforce terms, and meet operational obligations. Workspace administrators may control or request deletion of certain workspace data, subject to backups, logs, legal retention, and technical constraints.

19. Security

We use technical and organizational safeguards designed to protect account, workspace, proposal, integration, and operational data. No system is perfectly secure, and users should protect account credentials, manage permissions carefully, and notify us of suspected unauthorized access.

20. User choices and rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. Users can manage some account and workspace settings in Prastav. For privacy requests, contact support@prastav.io.

21. Customer responsibility for uploaded data

Customers and workspace administrators are responsible for the data they upload or enter into Prastav, including customer, prospect, employee, or third-party information. Customers must ensure they have appropriate rights, notices, and lawful bases to process that data through Prastav.

22. Children's privacy

Prastav is intended for business use and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information to Prastav, contact us so we can take appropriate action.

23. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised last updated date. Material changes may be communicated through the service or other reasonable means.