Proposal Panda

Privacy Policy

Effective: 1 January 2025

Proposal Panda (“we”, “us”, “our”) is an Oris Intelligence Private Limited product. This Privacy Policy describes how we collect, use, and safeguard your personal information when you use our platform at proposalpanda.com.

1. Information We Collect

  • Account data: name, email address, and organisation name collected when you sign up via ORIS Identity (Google or Microsoft SSO).
  • Usage data: AI run history, proposal drafts, and compliance check results stored to power your workspace.
  • Knowledge Vault content: documents you upload to train the RAG vault.
  • Billing data: plan status and subscription identifiers managed by the ORIS billing service. We do not store card numbers.
  • Log data: IP address, browser type, and request timestamps for security and debugging.

2. How We Use Your Information

  • Deliver and improve the Proposal Panda platform.
  • Generate AI-powered proposal drafts using your uploaded RFP content.
  • Enforce usage quotas and subscription entitlements.
  • Send transactional emails (proposal status, billing receipts).
  • Comply with legal obligations.

3. Data Sharing

We do not sell your personal data. We share data only with:

  • ORIS ecosystem services (Identity, LedgrOS, PeopleOS) strictly as needed to operate Proposal Panda.
  • AI middleware (ORIS AI) to process prompts. Your proposal content is sent to the AI service for processing and is not used to train public models.
  • Infrastructure providers (cloud hosting, database) under data processing agreements.
  • Law enforcement when required by applicable law.

4. Data Retention

We retain your account data for as long as your account is active. Proposals marked won or submitted are retained for 3 years after expiry under the Indian Contract Act 1872. You may request deletion of other data at any time (see Section 6).

5. Security

All data in transit is encrypted with TLS 1.3. Data at rest is encrypted using AES-256. Access is scoped by organisation using row-level security. We conduct periodic security reviews.

6. Your Rights (DPDP Act 2023)

Under India’s Digital Personal Data Protection Act 2023, you have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data.
  • Erase your data (subject to legal retention obligations — see Section 4).
  • Withdraw consent at any time.

To exercise these rights, email privacy@proposalpanda.com. We will respond within 30 days.

7. Cookies

We use a single session cookie (__Host-oris_token) to maintain your authenticated session. No third-party tracking cookies are set.

8. Changes to This Policy

We may update this policy. Material changes will be notified by email or in-app notice at least 14 days before taking effect.

9. Contact

For privacy questions, contact our Data Protection Officer at privacy@proposalpanda.com.

Oris Intelligence Private Limited — Proposal Panda