Subprocessors

• Purpose: authentication, database, storage and related backend services.
• Data processed: account data, workspace records, proposal data, uploaded document metadata and files where used.
• Location: depends on the configured Supabase project region.

• Purpose: application hosting, analytics and speed insights where enabled.
• Data processed: request metadata, usage analytics, performance information and application logs.
• Location: global cloud infrastructure.

• Purpose: payment checkout, subscription management and payment verification.
• Data processed: billing contact information, payment references, subscription status and transaction metadata.
• Location: Paystack controlled processing locations.

• Purpose: one-time passcodes, notifications, support messages and operational email.
• Data processed: recipient email address, message content and delivery metadata.
• Location: depends on the configured SMTP provider.

• Purpose: optional AI RFP analysis and AI assisted proposal workflows where enabled.
• Data processed: content submitted by the user for the selected AI feature.
• Location: OpenAI controlled processing locations.

Proposal Core may use monitoring providers to detect application failures, performance issues and downtime. If enabled, these providers may process technical logs, request metadata and diagnostic information.