Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email, organization name, and social media account connections. We also collect usage data: feature usage, login times, and browser information.

2. How We Use Your Data

We use your data to: provide the Service, improve AI features, process payments, and ensure platform security. We do not sell your data to third parties. Optional product updates require your explicit permission and are not currently sent. Each optional purpose is listed below.

Optional permissions and required processing

Consent notice version: consent-notice-v1

Each optional purpose is a separate decision and stays off without an explicit grant. Refusing one does not disable unrelated account features. Reading this page does not give consent.

• Product updates: your email address and your choice are used for optional product announcements. These messages are not currently sent; a future sender must check your recorded permission.
• Marketing offers: your email address and your choice are used for optional offers. These messages are not currently sent; a future sender must check your recorded permission.
• Analytics improvement: optional feature-usage measurements help improve the service. Website measurement also needs your separate browser cookie choice; permission here alone does not switch it on.
• AI personalisation: your own approved content and preferences help tailor suggestions to you. This is separate from sending a prompt to a provider to generate the result you request; it is not training our own model.

The following processing is required for the account, payments, security and legal duties; these are not optional consent switches.

• Account and service: account details, sessions and the content you ask us to handle let us provide the service.
• Payments and invoicing: transaction and invoice details process payments and maintain financial records.
• Security and fraud: sign-in, device and security records protect accounts and investigate abuse.
• Legal obligations: complaints, consent history and legally retained records meet applicable obligations.

In privacy settings you can allow or withdraw each optional purpose with the same single-button action. Withdrawal stops future optional processing; it does not undo processing already lawfully completed. Change the separate website cookie choice in the cookie section of this policy.

3. Data Security

All social media credentials and API tokens are encrypted using AES-256-GCM. Our core infrastructure — application servers, databases, and file storage — is self-hosted on dedicated servers. Some features do send data to third parties: AI processing to Anthropic and OpenAI, publishing to the social platforms you connect (for example, YouTube and Google Business Profile via Google's APIs), and the email we send you, which goes out through Zoho's India mail servers. JWT tokens use short expiry (15 minutes) with secure HTTP-only refresh tokens.

4. AI and Your Content

AI features (content generation, sentiment analysis, and reply suggestions) are processed using third-party AI providers — currently Anthropic (Claude) and OpenAI — whose services run on infrastructure in the United States. This means the text you submit for AI processing, and for community-reply features the name or handle and the message of the person who contacted you, is transmitted to these providers. We do not anonymise this content before sending it. We do not use your content to train our own AI models; the providers process it under their own API terms.

A separate purpose, not generation: when you upload a source image for an image-to-video or image-edit feature, and when we generate an image or video on your behalf, that image or video is sent to Google for automated processing — to check whether a real human face is present (so we can ask for likeness consent before proceeding) and to screen the generated output for unsafe content before it is delivered to you. Google does not identify who is in the image; it answers a narrow yes/no question and reads visible text, and nothing else. This is content moderation, and it is separate from the image and video generation described in section 8 — the same provider is used for both, for a different reason each time.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

This 30-day removal does not apply to an organisation's financial and tax records. If the account you deleted owned an organisation that holds financial records (invoices, payments), that organisation is not purged — it is tombstoned: your personal contact details on it are anonymised and removed, but its invoices and GST particulars are retained for 72 months, as required under Indian tax law (CGST Section 36) and permitted under GDPR Article 17(3)(b). Those retained records are never displayed, never actively used, and exist only to meet this legal retention requirement.

6. Your Rights

You have the right to: access your data, correct inaccurate data, request deletion of your data, export your data in a portable format, and object to data processing. Contact support@propelusai.com to exercise these rights.

7. Cookies

We use essential cookies for authentication (HTTP-only, secure). These are required to keep you signed in and cannot be turned off while you are using PropelusAI Soul. We do not use advertising cookies, and we do not sell or share what we measure.

We would also like to measure which pages people find useful, using Google Analytics through Google Tag Manager. That is optional. No Google script is loaded and no analytics cookie is set until you choose “Yes, that is fine” on the banner. Choosing “No thanks”, or simply never answering, loads nothing at all — the code has no branch that measures a visitor who has not agreed. PropelusAI Soul works identically either way, and your choice is stored in your own browser rather than sent to us.

8. International Users

PropelusAI Soul by RBSS Ventures is operated from India. Your data is self-hosted on dedicated servers. These servers are located in Germany (EU). By using the Service, you consent to processing in these locations. Voice processing and the Brain's own model also run on a GPU machine we rent in Finland (Helsinki, EU), reached only over a private connection from those servers, and by using the Service you consent to that location too. A backup copy of your data is kept off-site in the Netherlands (Amsterdam, EU) with our backup storage provider, Backblaze, and by using the Service you consent to that location too. Some data is also transferred to the United States when AI features are used (Anthropic and OpenAI for text, Google for image and video generation, Runway as the backup provider for video generation when Google is unavailable, and separately, Google for face-detection and content-moderation screening of source images and generated media — see section 4) and to the social platforms you connect when you publish. We comply with applicable data protection regulations, including the GDPR for EU users.

9. Contact

For privacy inquiries, contact us at support@propelusai.com or write to PropelusAI Soul by RBSS Ventures at the registered address in our Terms of Service.

10. Google user data

When you connect YouTube or Google Business Profile, PropelusAI Soulreads this from Google: your YouTube channel, videos and their analytics; your Business Profile posts and reviews. We use it only to give you what you connected it for: publishing, showing you your results, and drafting replies to reviews. We never sell Google user data, never use it for advertising, and never use it to train AI models.

PropelusAI Soul's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy · Google Privacy Policy

You can remove PropelusAI Soul's access at any time on your Google permissions page. Disconnecting the account inside PropelusAI Soul asks Google to revoke the access and stops PropelusAI Soul using the account.

11. Deleting your data (Facebook, Instagram, WhatsApp and Google)

To delete the data that came from Facebook, Instagram, WhatsApp, YouTube or Google Business Profile: disconnect that account inside PropelusAI Soul (we ask the platform to revoke the access and stop using the account), or write to support@propelusai.com from your account email with the words "delete my data". When you delete your account, your personal data is removed within 30 days.