Privacy Policy

Awwsm Inc. (“we,” “us,” or “our”), operating as Ergate, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at ergate.ai and our AI-powered proposal generation service (collectively, the “Service”).

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Company name, job title, and other details you add to your profile during onboarding.
• Client Data: Client names, email addresses, company information, and project details you enter into the Service.
• Proposal Content: Client briefs (uploaded documents, pasted text, or URLs), generated proposals, templates, and any edits you make.
• Payment Information: Billing details processed through our third-party payment processor, Stripe. We do not store your full credit card number.
• Communications: Information you provide when contacting support or providing feedback.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, clicks, and interactions within the Service.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: Session cookies for authentication and preference cookies. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process client briefs through AI to generate proposals, scope documents, and pricing estimates.
• Manage your account, subscriptions, and billing.
• Send transactional emails (account verification, password resets, receipts).
• Provide customer support and respond to your inquiries.
• Analyze usage patterns to improve features and user experience.
• Monitor for and prevent fraud, abuse, and security threats.
• Comply with legal obligations and enforce our Terms of Service.

3. AI Data Processing

Ergate uses artificial intelligence (powered by Anthropic's Claude API) to analyze client briefs and generate proposals. When you submit a brief:

• Your brief content is sent to Anthropic's API for processing. Anthropic's use of this data is governed by their privacy policy.
• Anthropic does not use data submitted through their API to train their models.
• We do not use your proposal content or client briefs to train any AI models.
• Generated proposals are stored in your account and are only accessible to you (and anyone you explicitly share them with).

4. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

4.1 Service Providers

We use trusted third-party services to operate Ergate. These providers only access your data as needed to perform their functions:

• Supabase: Database hosting and authentication infrastructure.
• Anthropic: AI processing for proposal generation.
• Stripe: Payment processing and subscription management.
• Resend: Transactional email delivery.
• PostHog: Product analytics and usage tracking.
• Sentry: Error monitoring and performance tracking.
• Upstash: Rate limiting and caching infrastructure.

4.2 Proposal Sharing

When you share a proposal via a public link, the proposal content becomes accessible to anyone with that link (and password, if you set one). View tracking data is collected when shared proposals are accessed.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change via email or a prominent notice on the Service.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained while your account is active and for up to 30 days after deletion.
• Proposals and client data: Retained while your account is active. Deleted upon account deletion.
• Usage and analytics data: Retained in anonymized or aggregated form for up to 24 months.
• Payment records: Retained as required by tax and financial regulations (typically 7 years).

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Secure password hashing using industry-standard algorithms.
• Access controls and authentication for all internal systems.
• Regular security reviews and monitoring.
• Rate limiting to prevent abuse.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Used by PostHog to understand how you use the Service and improve it. You can opt out of analytics tracking in your account settings.

We do not use advertising cookies or sell data to advertisers.

8. Your Privacy Rights

8.1 Rights Under GDPR (EEA Residents)

If you are a resident of the European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to Restrict Processing: Request that we limit the processing of your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Our legal basis for processing your data is: (a) performance of a contract (providing the Service), (b) legitimate interest (improving and securing the Service), and (c) consent (where applicable, such as analytics).

8.2 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act grants you the following rights:

• Right to Know: Request details about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal information, so this right does not apply.
• Right to Non-Discrimination: You will not receive different pricing or service quality for exercising your rights.

In the preceding 12 months, we have collected the categories of information described in Section 1. We have not sold personal information to third parties.

9. Exercising Your Rights

To exercise any of the rights described above, please contact us at privacy@ergate.ai. We will respond to your request within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing your request.

You may also delete your account and associated data directly from your account settings.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

11. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@ergate.ai and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. For significant changes, we will also notify you via email.

Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: