Skip to content

Legal

Privacy Policy

Propositio respects the privacy of all users. In this policy, we explain what personal data we collect, why we do this and how we comply with the GDPR.

9to5 BV (KvK 90662180), trading as Propositio · Van Ittersumstraat 150, 8012TN Zwolle, Netherlands
Version 1.1.0 · Last updated 17 October 2026

1.Data controller

  • 9to5 BV (KvK number: 90662180), trading as Propositio, located at Van Ittersumstraat 150, 8012TN Zwolle, Netherlands, is responsible for the processing of personal data as described in this privacy policy.
  • Contact: privacy@proposit.io or write to 9to5 BV, Van Ittersumstraat 150, 8012TN Zwolle, Netherlands.

2.Personal data we process

  • Account data (name, email address, password hash).
  • Contact details and customer information that users add to proposals.
  • Usage and log data (IP address, browser type, device, timestamps).
  • Financial data if payment occurs (limited to billing information).

4.Retention periods

  • Personal data is not kept longer than necessary for the purposes or as long as an account is active.
  • After account deletion, data is removed from active systems within 30 days; backups are cleaned within 90 days.
  • Default retention period: 2 years for all data types, unless legally determined otherwise.

5.Sub-processors

  • Supabase (hosting & database, EU datacenters).
  • Vercel (frontend hosting).
  • OpenAI (optional AI functionality; prompts may be processed outside the EU).
  • Email service (e.g. Resend) for transactional emails.
  • Propositio has concluded a data processing agreement with each sub-processor.

6.Data subject rights

  • Right to access, rectification, erasure and data portability.
  • Right to restriction and objection to certain processing.
  • Requests can be directed to privacy@proposit.io. Response follows within 30 days.

7.Sharing personal data

  • Personal data is not sold to third parties.
  • Data is only shared with sub-processors necessary for the Service or when legally required.
  • Only with your consent for marketing cookies, we share limited data with Meta Platforms Ireland Ltd. to measure and improve our advertisements: a few events about your own account (completing sign-up, connecting Moneybird, your organization sharing its first proposal), your email address and user ID in hashed form, your IP address, browser type and Meta cookie identifiers. For collecting and sending this data, Propositio and Meta are joint controllers; Meta is responsible for its own further processing. Meta may transfer data to the United States under the EU-U.S. Data Privacy Framework. You can withdraw your consent at any time via Cookie settings.
  • For international transfers, Propositio uses appropriate safeguards (such as Standard Contractual Clauses).

8.Security

  • Encryption of data at rest (Supabase) and in transit (TLS).
  • Role-based access control for employees.
  • Logging, monitoring and automatic backups.
  • Regular security audits and patch policy.

9.Cookies and tracking

  • Propositio uses functional cookies for session management and analytical cookies for product improvement.
  • Marketing cookies (the Meta pixel) are only placed after explicit consent, and never on the proposal pages your clients open.
  • More information can be found in the cookie policy.

10.Complaints

  • If you have complaints about the processing of personal data, you can contact us via privacy@proposit.io.
  • You also have the right to file a complaint with the Dutch Data Protection Authority.

This privacy policy forms one whole with the Terms of Service. For data processing agreements with business customers, see our Data Processing Agreement.

Questions or requests? Contact us via legal@proposit.io.