Legal

Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how Quiip.ai ("we," "us," "our"), operated by Pedals Up, collects, uses, and protects personal data when you use the Quiip.ai platform (the "Service").

1.Who This Applies To

This policy covers:

People who create a Quiip.ai account and use it to draft, manage, and send proposals ("Users")
Team members and collaborators invited into a Quiip.ai account
Clients who receive a proposal through a secure link and view, comment on, or sign it

2.What We Collect

Account informationName, company name, email address, password (stored hashed, never in plain text), and role within your organization as provided or added by user.

Client and lead dataInformation you enter about your leads and clients: company name, contact person, email, phone, industry, location, time zone, and notes.

Knowledge base contentDocuments you upload to train proposal generation: service descriptions, pricing, case studies, tech stack details, timelines, terms and conditions, and past proposals. Files are chunked and stored in a vector database to power AI drafting.

Proposal contentBriefs, drafts, edit history, comments, and version history for every proposal created in your account.

Signature dataWhen a client signs a proposal: the signature itself (drawn or typed), a timestamp, and technical metadata such as IP address and browser information, captured to help establish the authenticity of the signature.

Usage and device dataLog data such as login timestamps, pages viewed, actions taken (including proposal view and open events tracked for status updates), IP address, browser type, and device information.

Payment informationSubscription billing is part of our Phase 2 roadmap and is not yet active. Once live, payment will be handled by a third-party payment processor, and we will not store full card numbers on our own servers.

3.How We Use This Data

To provide the Service: generating proposals, storing and organizing your content, tracking status, enabling collaboration, and processing signatures.
To improve AI drafting for your account specifically, using the knowledge base and past proposals you've provided. This does not train models shared with other customers.
To send service notifications: proposal opened, proposal signed, team invitations, reminders, and account or security alerts.
To maintain security: detecting fraud, abuse, or unauthorized access, and enforcing our Terms of Service.
To meet legal obligations, including responding to lawful requests from authorities.

We do not sell personal data.

4.Who We Share It With

Service providers who process data on our behalf, under contractual confidentiality and security obligations, including:

Cloud infrastructure and file storage providers
The AI model provider used for proposal generation
Email, SMS, and document-delivery providers used to send proposals and notifications
CRM integrations you explicitly connect (e.g., syncing a proposal to a third-party CRM)

Your invited collaborators, according to the access level you or your account admin grants them.

Clients you send a proposal to, who see only the specific proposal shared with them through a secure, time-limited link.

Legal and safety exceptions, where required by law, to protect our rights, or to prevent harm.

5.Data Security

Data is encrypted at rest (AES-256) and in transit (TLS 1.3 or higher).
Access is controlled through role-based permissions at both the application and database level.
We conduct security testing ahead of major releases and on a recurring schedule.

No system is completely secure, and we cannot guarantee absolute security, but we design and operate the Platform to reduce risk at every layer we control.

6.Data Retention and Deletion

We retain your data for as long as your account is active, and as needed to provide the Service.
You can request export or deletion of your account data at any time.
On a verified deletion request, we remove your data, including from backups, within 30 days, except where we're required to retain specific records for legal or accounting reasons.

7.Your Rights

Depending on where you're located, you may have rights to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion ("right to be forgotten")
Export your data in a portable format
Object to or restrict certain processing

If you're in the EU/EEA (GDPR): the above rights apply, and you may lodge a complaint with your local data protection authority.

If you're in India (DPDP Act): you have the right to access, correct, and erase your personal data, and to receive notice of how it's processed. We act as a data fiduciary for personal data processed on the Platform and rely on the lawful bases required under the Act.

To exercise any of these rights, contact us at hello@quiip.ai

8.International Data Transfers

Because we use cloud infrastructure and service providers that may operate in multiple regions, your data may be processed outside your home country. Where this happens, we rely on appropriate safeguards required by applicable law.

9.Children

Quiip.ai is a business tool intended for use by working professionals. It is not directed at, and we do not knowingly collect data from, individuals under 18 years of age.

10.Changes to This Policy

We'll update this policy as the Platform evolves, particularly as billing, analytics, and additional integrations (noted on our roadmap) go live. Material changes will be communicated to account owners via email id available on our database.

11.Contact

For any questions related to this privacy policy, please reach out to us via hello@quiip.ai