Privacy Policy

Proopsys (“we,” “us,” or “our”) provides a personal operating system that helps individuals manage their work, life, finances, and growth in a single workspace. This Privacy Policy explains what information we collect when you use Proopsys, how we use it, and the rights you have over your data.

By creating an account or using Proopsys, you agree to the practices described in this policy. If you do not agree, please do not use the service.

We collect the following categories of information:

• Account information. Your name, email address, and a hashed password when you sign up.
• Profile and configuration. Persona selection, businesses, goals, role, time zone, and tab preferences you set inside Proopsys.
• Workspace content. Tasks, notes, calendar entries, finance records, contacts (CRM), content drafts, and other items you create or upload.
• AI conversations. Prompts you send to AI agents and the responses returned, so we can provide context-aware assistance.
• Usage data. Pages visited, features used, device type, browser, IP address, and approximate location for diagnostic and security purposes.
• Payment information. If you subscribe to a paid plan, billing details are processed by our payment provider; we do not store full card numbers.

We use the information we collect to:

• Provide, operate, and maintain the Proopsys workspace and its features.
• Personalize your experience, including AI agent responses, daily briefings, and recommended actions.
• Authenticate accounts and protect against fraud, abuse, and unauthorized access.
• Communicate with you about product updates, security notices, and support requests.
• Analyze aggregated usage to improve performance, reliability, and user experience.
• Comply with legal obligations and enforce our Terms of Service.

We do not use your workspace content to train third-party AI models without your explicit consent.

Proopsys uses Supabase as its primary database and authentication provider. Your data is stored in Supabase’s managed PostgreSQL infrastructure and protected by row-level security policies that restrict access to your own user account. Connections between your browser, our application, and Supabase are encrypted in transit using TLS.

We follow industry-standard practices for protecting data at rest and in transit, including encrypted backups, scoped API keys, and least-privilege access controls. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you in accordance with applicable law.

We do not sell your personal information to anyone. We share data only in the following limited circumstances:

• Service providers. Trusted infrastructure partners (such as Supabase for database/auth, Anthropic for AI inference, and our payment processor) who process data on our behalf under contractual confidentiality obligations.
• Legal requirements. When required to comply with applicable law, valid legal process, or to protect the rights, property, or safety of Proopsys, our users, or others.
• Business transfers. If Proopsys is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how Proopsys is used. Essential cookies are required for the service to function. You can control non-essential cookies through your browser settings; blocking essential cookies may prevent parts of Proopsys from working correctly.

• Essential cookies. Authentication session and user preferences. These are required to keep you signed in and to remember your workspace settings.
• Analytics cookies. Anonymous usage tracking via our own system. We use this to understand which features are useful and where the product can be improved.
• No third-party advertising cookies. Proopsys does not load advertising cookies or share data with third-party ad networks.

Depending on where you live, you may have rights regarding your personal information.

If you are in the European Economic Area or United Kingdom (GDPR), you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data (the “right to be forgotten”).
• Restrict or object to certain processing of your data.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

If you are a California resident (CCPA/CPRA), you have the right to:

• Know what personal information we collect, use, and disclose about you.
• Request deletion of your personal information, subject to certain exceptions.
• Correct inaccurate personal information we maintain about you.
• Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioral advertising.
• Be free from discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@proopsys.com. We will respond within the timeframes required by applicable law.

We retain your account information and workspace content for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where we are legally required to retain it (for example, financial records for tax purposes) or where it has been anonymized in a way that no longer identifies you.

You can export your data at any time from within Proopsys. We retain backups for a limited period for disaster recovery purposes.

If you have questions about this Privacy Policy, want to exercise your rights, or need to report a concern, please contact us at:

support@proopsys.com