Privacy Policy

Agreement and updates

By accessing our website or using the Services, you agree to this Privacy Policy and to our Terms of Service. If you do not agree, please do not use the Services. We may update this Privacy Policy from time to time; the version posted on our website reflects the latest revision. If we make material changes, we will provide notice as required by law, which may include posting a notice on our website, within the Services, or contacting you at the email address we have on file.

Where applicable law provides you with greater protections than this Policy, those laws will control to the extent of any conflict.

Types of information we collect

We may collect information that identifies, relates to, describes, or could reasonably be linked with you or your household (“Personal Information”), including identifiers (such as name, email address, postal address, phone number, online identifiers, and account credentials), commercial information (such as subscription or purchase history), internet or network activity (such as IP address, device identifiers, browser type, pages viewed, and referring/exit URLs), geolocation data derived from IP address or device settings when enabled, audio or electronic information (such as call or meeting recordings where permitted and consented to), professional or employment-related information you choose to provide, and inferences drawn from the above to improve the Services.

We may also collect aggregated or de-identified information that cannot reasonably be used to identify you. We may treat certain business contact information as relating to a business rather than an individual, where permitted by law.

How we collect information

We collect Personal Information that you provide directly—for example, when you create an account, complete forms, subscribe to communications, pay for Services, contact support, or participate in surveys or demos. We also collect information automatically when you use our website or Services, such as through server logs, cookies, pixels, and similar technologies, and from integrations you authorize (for example, when you connect third-party email, calendar, or messaging tools to your workspace).

We may receive information from third parties such as analytics providers, advertising networks, data partners, or social platforms when you interact with our ads or content, subject to their policies and your settings.

Cookies and similar technologies

We use cookies and similar technologies to operate the Services, remember preferences, authenticate sessions, measure performance, analyze usage, and deliver relevant communications. You can control cookies through your browser settings; disabling cookies may limit certain features. Where required, we obtain consent before using non-essential cookies.

We may use third-party analytics (such as Google Analytics) to understand how visitors use our website. Those providers may collect information as described in their own privacy policies.

How we use information

We use Personal Information to provide, maintain, secure, and improve the Services; process transactions; authenticate users; communicate with you about updates, security, and support; personalize your experience; conduct research and development; comply with law and enforce our agreements; detect, investigate, and prevent fraud, abuse, or security incidents; and exercise or defend legal claims.

With appropriate consent or as permitted by law, we may send marketing communications about Propicy. You may opt out of promotional emails by using the unsubscribe link or contacting us as described below.

How we share information

We share Personal Information with service providers and subprocessors who perform services on our behalf—such as hosting, payment processing, email delivery, analytics, customer support, security monitoring, and professional advisors—subject to contractual obligations to use the data only as instructed and to implement appropriate safeguards.

We may disclose information if we believe in good faith that disclosure is necessary to comply with law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Propicy, our users, or others; in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets; or with your consent. We do not sell your Personal Information for monetary consideration as that term is commonly understood under U.S. state privacy laws.

Google user data and Gmail (workspace integration)

When an authorized workspace administrator connects a Gmail account to Propicy, we access Google user data only to provide the email features you enable inside the Services (for example, our Conversations experience: displaying threads, sending and receiving messages through the connected mailbox, and keeping mail in sync with reasonable technical metadata). Connecting Gmail is optional; you can disconnect at any time from the Integrations settings in the product, which revokes our ongoing use of that connection except as needed to comply with law or resolve disputes.

OAuth and API scopes. The connection uses Google’s secure sign-in (OAuth 2.0). Depending on the permissions you grant at connect time, we may request access consistent with providing those features, including: verifying your Google identity and primary email address (openid, email), and accessing the connected mailbox to read, send, label, and otherwise process messages as needed for the product using Gmail API scopes such as https://www.googleapis.com/auth/gmail.modify and https://www.googleapis.com/auth/gmail.send (together, “Gmail user data” for that connected account). We request the minimum access reasonably necessary to operate the features we describe at connect time and in the product.

How we use Gmail user data. We use Gmail user data received through Google APIs solely to provide and improve user-facing functionality of the Services you choose to use—for example, to ingest inbound mail relevant to your workspace conversations, to send outbound mail you initiate from the Services, to correlate replies, and to maintain reliability and security of that integration. We do not use Gmail user data for serving advertisements, and we do not sell Gmail user data. We do not use Gmail user data to train generalized artificial intelligence or machine learning models for unrelated third-party products.

Storage, subprocessors, and transfers. To maintain the connection we store OAuth tokens and related integration fields (such as the connected address and sync metadata) with our cloud hosting and database providers, who act as service providers / subprocessors under instructions consistent with this Policy. Message content and headers needed to operate Conversations may be processed and retained as described in our general retention practices above and as required to deliver the feature. Google may process data under Google’s own policies when you authenticate or use Gmail.

Notifications. Where configured for your deployment, Google may deliver Gmail push notifications to an endpoint we operate so we can sync new mail; that processing is limited to operating the integration.

Limited use. Propicy’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

SMS, messaging, and communications compliance

If you enroll in text messaging or similar programs we offer, we collect and use your mobile number, message content where applicable, and related consent records as needed to deliver messages, comply with carrier and regulatory requirements (including the Telephone Consumer Protection Act and applicable rules), and honor your opt-out requests.

U.S. SMS (Propicy Notifications). For U.S. application-to-person messaging (for example 10DLC), we use contracted connectivity and messaging services to send and receive messages. We do not list those vendors by name in this Policy; we choose subprocessors who meet carrier and regulatory expectations, and the same privacy commitments apply no matter which technical path delivers a message. Our practices align with the consent, content, frequency, and keyword rules described in our Terms of Service and with the U.S. campaign registrations we file for this program (including under the name Propicy Notifications). For this program we send plain-text operational SMS only—no hyperlinks, shortened links, or unusual formatting patterns in the message body. Consent is collected as described in the Terms (including web forms with an unchecked SMS opt-in checkbox and clear call-to-action language where a mobile number is collected). Information collected for this program is used only to operate that program, meet carrier and legal requirements, and honor STOP, HELP, and other supported keywords. We do not sell mobile numbers or SMS-related personal information, and we do not share that information with unaffiliated third parties for their own marketing. We may use vetted service providers solely to transmit and deliver messages on our behalf, subject to confidentiality and processing obligations consistent with this Policy.

Message and data rates may apply. Message frequency varies based on your interaction with Propicy. You can opt out by following the instructions in the message—for example, reply STOP where supported. For help, reply HELP or INFO where supported, or contact support@propicy.com.

Consent to receive marketing texts is not required to purchase our Services unless we expressly state otherwise for a specific program.

Security and retention

We implement administrative, technical, and physical safeguards designed to protect Personal Information. No method of transmission or storage is completely secure; you use the Services at your own risk.

We retain Personal Information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the nature of the data and legal requirements.

Your choices and rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your Personal Information, or to object to or restrict certain processing. California residents may have additional rights under the CCPA/CPRA. To exercise rights, contact us using the information below. We may verify your request as permitted by law.

If we deny a request, you may have the right to appeal as provided by applicable law.

Children’s privacy

The Services are not directed to children under 16 (or the higher age required in your jurisdiction), and we do not knowingly collect Personal Information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps to delete it.

International users

Propicy operates in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate, which may have different data protection rules than your country.

Third-party links

Our website or Services may contain links to third-party websites or integrations. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing information.

Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at the mailing address below, at ignacio@propicy.com, or through our website contact form.