Privacy policy

Draft. Needs review by a lawyer before launch. This text was written from what the product actually stores and sends, so that a lawyer has something accurate to start from. It is not yet a binding policy.

Propel is run by [Company legal name] ("we"). This page says what Propel keeps about you, why, who else sees it, how long it is kept, and what you can do about it. To ask anything about it, write to [Contact address].

Who this covers

• You, the person with a Propel account, and the people you invite into it.
• People your account works with: the leads and contacts you add or find, the people who reply to your emails, people you interview or who send you footage, and visitors to your own website if you add Propel's measurement to it. For their data, you decide what Propel does with it and we act on your instructions. You are responsible for having a lawful reason to use their data, and for telling them about it.

What we keep, and why

Your account. Your email address, your name if you give it, your role in the account, and a one-way hash of your password (never the password itself). If you sign in through our sign-in provider, its id for you instead of a password. We need these to let you in and to tell you about your account.

What you and the agent do in Propel. Your conversations with the agent, the runs it carries out and the steps it took, the files you upload or it makes, what it remembers about your business (you can see and delete each memory), your products and what Propel read about them from your website or code, the marketing it plans and drafts, and the results it measures. We keep these because they are the service.

Connections you make. When you connect Google, LinkedIn, X, Slack, a mailbox, an ad account, GitHub or another app, we keep the access it grants, sealed with encryption, so Propel can act for you there. When you sign Propel's own browser in to a site, we keep that site's sign-in, sealed the same way. You can remove any connection at any time; removing it deletes our copy and, where the service allows, tells it to end the access.

Leads and contacts. The names, work addresses, companies, profile links and messages of the people you add, import or find through a lead-data provider, and their replies. Someone who asks not to be contacted is stopped and stays stopped.

Video, voice and interviews. Footage, recordings and voices you upload or record, and, for anyone who appears in them, a record of their consent and what it covers. A person can withdraw their consent through the link they were given; what they gave is then taken out of use and deleted. A copy of your own voice is made only with your consent on record.

Paid ads. The ad accounts you connect, the campaigns Propel builds or runs for you, what they spend, and how they perform.

Your website's visitors (if you add measurement). A random id for a visit, which page and ad it came from, and the events you choose to send (a sign-up, a purchase). Not names or addresses unless you send them. Visits that never become anything are deleted after 30 days; free-text answers after 90 days.

Payments. Your plan, what you bought and when, and the credits you used. Card details go to the payment provider and never reach us.

Running the service. Logs of errors and requests, written without email addresses, sign-in tokens or keys. Counts of what each account used, so we can bill fairly and stop abuse.

Who else sees it

We use other companies to run Propel. Each sees only what its job needs:

• Hosting and storage: the company that runs our servers and database, and the object storage that holds videos and large files.
• AI model providers: when the agent thinks, writes, reads a page, makes an image, video or voice, the text or media it is working on is sent to the model doing that step. These providers may be in the United States, Europe or China and other countries. We choose models by how well they do the task and what they cost.
• Email: the service that sends Propel's own emails to you (confirming your address, notices you asked for).
• Payments: our payment provider, which is the merchant of record and keeps its own records of your payments.
• Sign-in: the sign-in provider, if your account uses it.
• Services you connect: Google, LinkedIn, X, Slack, ad platforms, GitHub, your mailbox's host, a lead-data provider. What Propel sends them is what you asked it to do there.

We do not sell your data, and we do not use your data to advertise to you.

Pooled learning. To get better at predicting what will work, Propel can learn from numbers (how posts performed, never their words, names or your products) across many accounts at once. Nothing is published from fewer than five accounts together. You can opt out in Settings, and what your account gave is then deleted.

We will disclose data when the law requires it, and we will tell you when we are allowed to.

How long we keep it

• Your account and its data: for as long as you have the account.
• A finished run's step-by-step history: 90 days unless you change it in Settings. The files it made stay until you delete them.
• Screenshots from Propel's own browser: 30 days.
• Backups: the nightly copies of our data are kept for three days, then replaced. Our host's own backups age out on their own schedule.
• After you delete your account: see below.

Your choices and rights

• See and download your data. In Settings, under Account, the account's owner can download a copy of everything Propel holds for the account, as a zip of plain JSON files, at most once an hour. Passwords, sign-in grants and keys are left out.
• Correct it. Edit it in the app, or ask us.
• Delete parts of it. Delete a conversation, a file, a memory, a product, a lead or a connection in the app, and it goes.
• Delete your account. In Settings, under Account, the account's owner can ask for the whole account to be deleted. Nothing is deleted for 7 days, in case it was a mistake; until then the owner can cancel it there. After that Propel deletes the account and everything in it: its people's accounts with Propel, conversations, runs, files, memory, products, marketing, results, videos, voices, ads data, connections (and tells each connected service to end its access where it allows), and stops the subscription. We email you when it's done.
• What stays after deletion: a record that the account was deleted (numbers, dates and statuses, no names or addresses); what was paid and refunded, which the law requires us to keep for our accounts; for an address that bounced or complained, a one-way hash of it so we never email it again; numbers already published from five or more accounts together, which hold nothing of yours; the payment provider's own records; if your account signs in through our sign-in provider, that provider's own record of you, until we remove it there; and the backups above until they age out. A connected service's own record that it once gave Propel access stays until you remove it in that service.
• Object or complain. Write to [Contact address]. You can also complain to your local data protection authority.

Security

Sign-in grants for connected services, mailbox passwords and Propel's own browser sign-ins are encrypted at rest. Keys you save in Settings (for a lead-data provider or an AI model) are stored on our servers without that extra encryption, and are never shown back in full or included in your data export. Each account's own conversations, runs, files and memory are kept in their own file, separate from every other account's; its marketing data is kept in one shared database, where every record carries its account and every request is limited to the account making it. Access by our team is limited to running and fixing the service.

A mailbox password saved in Propel's older email settings, which Propel no longer uses to send, is stored the same way as those keys: without that extra encryption, and never included in your data export.

Children

Propel is for businesses. It is not meant for anyone under 16, and we do not knowingly keep their data.

Changes

If this policy changes in a way that matters, we will tell account owners by email before it takes effect.

Google user data

Added 26 October 2026.

If you connect Google, Propel uses these permissions: to send email from your Gmail after you approve each message; to read the events on your primary calendar and add an event to it (adding only after you approve); to read your Google Analytics reports; and to read your Search Console data. Only if the permission to read mail is switched on for the service you use, also to search and read your Gmail when you ask for something that needs it.

We use this data only to provide and improve the features you use inside Propel. We do not sell it, we do not use it for advertising, and we do not use it to train generalised AI models. People at our company do not read it except where you ask for support, where it is needed for security or abuse, or where the law requires. The text a task needs is sent to the AI model provider doing that task, as "Who else sees it" says. [FOUNDER, gap G-7: say here that those providers may not train on it only once that is true for every provider a step holding Google data can use.] The members of your workspace can see what the workspace's agent did with Google data.

You can disconnect Google at any time on the Connections page, which revokes our access and deletes our copy of the grant, and you can delete your account and everything in it.

Propel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

LinkedIn

Added 29 October 2026.

If you connect LinkedIn, Propel asks for three permissions: to sign you in (your LinkedIn id), to read your basic profile (your name and photo), and to post as you. It does not ask for your email address. Propel posts on LinkedIn only what you approve. Disconnecting LinkedIn on the Connections page deletes our copy of the access and asks LinkedIn to end it.

X

Added 29 October 2026.

If you connect X, Propel asks to read your posts and your profile, to post as you (with images or video you approve), and to keep the connection working while you are away. Propel posts on X only what you approve. When you ask it to learn from your past posts, it reads up to 50 of them on the Free plan and up to 200 on a paid plan. Disconnecting X on the Connections page deletes our copy of the access and asks X to end it.

Instagram, Facebook Pages and Meta ads

Added 29 October 2026.

If you connect Instagram through Facebook, Propel asks to read your Instagram account's basic details and the Facebook Pages you manage, to publish to Instagram what you approve, and to read how your Instagram posts performed. If you connect a Meta ad account, Propel asks to read and manage its ads: it reads your campaigns, what they spend and how they perform, and it creates or changes ads only within the budgets and limits you set and, on the Free plan, only after you approve each change. To have Propel delete what it holds from Facebook or Instagram, see the data-deletion page, or disconnect Meta on the Connections page.

The browser extension

Added 29 October 2026.

Propel's browser extension lets the agent work in your own Chrome, at a person's pace, on the pages it is asked to work on. To do that it can open and read those pages and act on them for you; it keeps its pairing with your Propel account in the extension's own storage. What it reads on a page is sent to your Propel account for the task you asked for, and treated like anything else the agent reads (see "What we keep, and why"). Posts and messages it would send wait for you unless you have let that channel run on its own. Remove the extension in Chrome at any time.

Ads and conversions

Added 29 October 2026.

If you connect an ad account (Google, Microsoft, Meta, LinkedIn, Reddit, TikTok or X), Propel reads its campaigns, spend and results, and creates or changes ads only within the budgets and caps you set. Where a platform lets Propel report a conversion (a sign-up or a purchase on your site) back to it so it can measure your ads, Propel sends only what that measurement needs, from the events you chose to send. The platform's own terms and privacy policy apply to what it receives.

Posting through Postiz and other channels

Added 29 October 2026.

You can have Propel publish through your own Postiz account (and the apps you connected to it there), and to Bluesky, Mastodon, Discord, Telegram, dev.to and Hashnode. For each, Propel keeps the key or access you give it so it can post for you, and posts only what you approve. You can remove the connection at any time. Each service's own terms and privacy policy apply to what is posted there.

Made with AI

Added 29 October 2026.

A video or image that shows a person made with AI carries a visible label saying so (for example "AI-generated person" or "AI presenter"), and an image ad whose picture was made with AI is labelled "Made with AI". Where our signing certificate is set up, they also carry a signed record of how they were made (C2PA), which some platforms read. The label and the record describe how the piece was made; they hold none of your personal details.

Errors we send for fixing

Added 29 October 2026.

When something breaks, Propel may send a report of the error to an error-tracking service so we can fix it. Before it leaves, each report is rebuilt to hold only the error and where in our code it happened: email addresses, keys, links' query strings, network addresses and long ids are taken out, and your account is named only by a code that service can't turn back into you. The service is a sub-processor like the others under "Who else sees it".