Privacy Policy

Last Updated: June 1, 2026

1. Data Collection

ProposalFlow AI ("we," "our," or "us") operates strictly as a data processor for our enterprise clients. We collect and process proprietary knowledge base documents, RFPs, and security questionnaires strictly for the purpose of generating automated responses.

2. AI Processing & Model Training

Crucial Commitment: Your data is never used to train foundation models. We employ strict tenant isolation. Embeddings generated for RAG (Retrieval-Augmented Generation) are stored in isolated vector spaces and are completely segregated via logical access controls.

3. Data Retention

Upon session termination or client request, all temporary files, generated vectors, and cached responses are cryptographically erased from our hot storage layer within 24 hours.

4. Security Measures

We employ AES-256 encryption at rest and TLS 1.3 in transit. Our infrastructure is continuously monitored and audited against SOC 2 Type II and ISO 27001 standards.

5. Contact Data Protection Officer

For any privacy-related inquiries or data deletion requests, contact our DPO at privacy@stackwise.site.