Privacy Policy

1. Introduction

IntentWin (“we,” “our,” or “us”) operates an AI-powered proposal intelligence platform at intentwin.com. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

By using IntentWin, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and billing information. This is necessary to provide you access to the platform and process your subscription.

Proposal Content

You may upload documents (PDF, DOCX, PPTX, TXT, MD, CSV) and enter proposal content, RFP requirements, win themes, brand voice settings, and other business information. This content is used solely to generate and improve your proposals.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, proposal outcomes you report (win/loss), and session duration. This helps us improve the service and your experience.

Device and Browser Information

We collect standard technical information such as your browser type, operating system, IP address, and device identifiers to ensure platform security and compatibility.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the IntentWin platform
• Generate AI-powered proposal content tailored to your needs
• Process your subscription payments
• Send service-related communications (account updates, security alerts)
• Analyze usage patterns to improve platform features
• Train and improve our proposal generation models using aggregated, de-identified data
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Third-Party Services

IntentWin integrates with the following third-party services to deliver our platform:

• Supabase — Database hosting and user authentication. Your account data and proposal content are stored securely in Supabase's infrastructure.
• Google Gemini — AI processing for proposal generation. Proposal content is sent to Google's AI models for text generation. Google's data handling is governed by their enterprise terms of service.
• Vercel — Application hosting and content delivery. Vercel processes web requests and serves the IntentWin application.
• Stripe — Payment processing. Stripe handles all payment card data. We never store your full card number on our servers.

Each third-party provider operates under their own privacy policy and data handling practices. We select providers that maintain industry-standard security and privacy protections.

5. Data Storage and Security

Your data is stored on secure, encrypted infrastructure provided by Supabase and Vercel, with servers located in the United States. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments
• Principle of least privilege for internal access

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure.

6. Cookies and Tracking

We use essential cookies to maintain your authenticated session and remember your preferences. We may also use analytics cookies to understand how users interact with our platform.

You can control cookie settings through your browser. Disabling essential cookies may prevent you from using the platform.

7. Data Retention

We retain your account information and proposal content for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is permanently deleted.

You may request deletion of your data at any time by contacting us at privacy@intentwin.com.

8. Your Rights

All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Export your proposal content

GDPR (European Economic Area)

If you are in the EEA, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing your data is the performance of our contract with you and our legitimate business interests.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of any sale of personal information. We do not sell personal information.

9. Children's Privacy

IntentWin is a business-to-business service and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the platform. Continued use of IntentWin after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

IntentWin
Email: privacy@intentwin.com