Proposify

Summary

The provided diff only states that approximately 311 words were removed. It does not identify the deleted language or show any replacement text.

Key Legal Implications

Because the actual deletions are unavailable, it is not possible to determine whether the amendment changes:

• Customer data ownership or usage rights
• Confidentiality or privacy obligations
• Data retention, deletion, or security requirements
• Data-sharing rights with affiliates or third parties
• Liability, indemnification, or audit rights
• Suspension, termination, or post-termination obligations
• Governing law or dispute-resolution terms

AI Training and Model-Use Provisions

The available diff does not provide enough information to determine whether the contract changes how customer data may be used to train, fine-tune, evaluate, or improve AI models.

In particular, the missing deleted language could have:

• Prohibited use of customer data for AI training
• Required customer consent before training or model improvement
• Limited training to de-identified, aggregated, or anonymized data
• Allowed use of prompts, inputs, outputs, or usage metadata
• Addressed whether data is retained by AI providers or subprocessors
• Required disclosure of AI model providers or opt-out rights
• Allocated ownership of trained models, derivatives, or model outputs

Risk Assessment

The principal risk is lack of visibility into the removed terms. If the deleted provisions previously restricted data use or AI training, their removal could materially expand the provider’s rights. Conversely, if the deleted provisions imposed broad permissions or customer obligations, their removal could reduce those risks.

Recommended Next Step

Obtain the actual redlined text or the full before-and-after versions of the contract. The deleted 311 words should be reviewed specifically for references to:

customer data, inputs, outputs, usage data, train, fine-tune, improve, machine learning, AI, models, de-identify, anonymize, subprocessors, and retention.

Key Changes and Risks

1. No Express AI-Training Authorization

• The diff does not expressly state that customer data, uploaded content, or personal information may be used to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.
• The new language permits vendors to use information to “support and improve the Services” and permits aggregate anonymous information to be used to improve the Website and Services. This wording is broad enough to create ambiguity about whether AI-related development could be included.
• Because the policy does not define “improve,” “Services,” “data,” or “aggregate anonymous information,” customers may be unable to determine whether their content could be used in AI systems, whether it would be de-identified, or whether it would be retained after account termination.
• The policy also does not address AI-specific safeguards, including model-training opt-out rights, deletion from training datasets, human review, confidentiality, or restrictions on using customer-submitted confidential information.

2. Expanded Third-Party Sharing

The prior language generally stated that information would not be shared with third parties without permission, subject to limited exceptions. The revised language expressly permits sharing with:

• Credit-card processors, subject to a prohibition on promotional use of personally identifiable information;
• Integration partners, including data exports requested by the customer;
• Developers, support administrators, designers, data analysts, and network technicians;
• Vendors that manage or store data uploaded to Proposify or support and improve the Services;
• Legal, financial, and other professional advisers;
• Third parties where the customer consents or disclosure is required by law.

Risk: These categories are broad and do not identify specific vendors, geographic locations, retention periods, security standards, or contractual limits on secondary use. The restriction on promotional use applies specifically to credit-card processors and may not clearly apply to all other vendors.

3. Broader Disclosure and Transfer Rights

The revised policy permits disclosure where Proposify believes it is necessary to:

• Investigate or prevent illegal activity, suspected fraud, or threats to physical safety;
• Comply with legal process or protect its rights;
• Transfer personal information to a third party following an assignment or sale of the Website.

Customers will be notified by email of a change in ownership or control. However, the policy does not provide an objection, deletion, or termination right following such a transfer.

4. Changes to Customer Rights and Communications

• Customers may review, update, delete, or correct personal information in their account; support may assist where account access is unavailable.
• The revised policy permits email contact for legally required notices, service information, and complaint resolution.
• California disclosures are reframed as a right to request categories of personal information shared and the businesses receiving it, including for direct marketing.

5. Unilateral Policy Changes

The policy may be amended at any time, at Proposify’s sole discretion and without prior notice, with customers directed to check back periodically. This substantially reduces advance-notice protection and creates risk that material data-use changes—including future AI-related uses—could take effect without direct consent.

Overall assessment: The principal risk is not an express AI-training grant, but the combination of broad “support and improve” language, extensive vendor access, and unilateral amendment rights.

Key Changes and Legal Risks

Executive Summary

The diff appears to replace much of the prior privacy policy with substantially different language. It adds privacy-rights, international-transfer, California, fraud-prevention, and intellectual-property provisions, but also removes or narrows several disclosures concerning third-party access and data sharing. The diff is highly repetitive and internally inconsistent, so the final published version should be reviewed for accuracy and completeness.

Customer Data and AI Model Training

• No express AI-training provision appears in the diff.
• The revised text does not state whether customer content or personal information may be:
• used to train, fine-tune, or evaluate artificial-intelligence models;
• disclosed to AI vendors or model providers;
• anonymized or aggregated for model development; or
• excluded from model training by default or upon request.
• The new statement that Proposify has “no claim / rights” to customer intellectual property is helpful as an ownership statement, but it does not restrict use of customer data for AI training or grant customers control over model inputs, outputs, or derived data.
• Any separate AI-use terms, product terms, or vendor arrangements should be reviewed. If AI training is permitted, the policy should clearly identify the data involved, purposes, vendors, retention, opt-out rights, and whether personal or confidential customer content is included.

Data Sharing and Use

• Prior language expressly described sharing with credit-card processors, integration partners, data-storage vendors, contractors, and professional advisers. Much of this is replaced by the broad statement: “we will not share any of your information to any third party without permission.”
• This creates possible inconsistency with other provisions allowing:
• international transfers;
• sharing with third parties for their own direct marketing purposes in California disclosures; and
• use of information under the policy in effect at the time of use.
• Removing specific vendor and contractor disclosures may create transparency and compliance risks, particularly where service providers process uploaded customer data.
• Email use is narrowed to legal notices, service information, and complaint resolution, replacing broader “support and improve” language.

Customer Rights and Ownership

• Customers are told they may review, update, delete, or correct personal information, but the process is changed from a specific support email/access procedure to a more general contact instruction.
• The policy adds: “Proposify holds no claim / rights to the Intellectual Property that is used, and stored by our customers.” This may reassure customers but should be coordinated with the Terms of Service and clarified regarding licenses needed to operate the service.

International and California Provisions

• Continued use is deemed consent to transfer personal information to the United States. This may be inadequate for jurisdictions requiring specific transfer mechanisms or consent standards, including the EU/UK.
• New California “Shine the Light” disclosures address direct-marketing sharing, but do not necessarily satisfy broader modern California privacy-law requirements.
• The policy now permits amendment at sole discretion and without prior notice, increasing customer uncertainty and potentially conflicting with contractual notice obligations.

Drafting Concerns

• The diff contains extensive duplicated and apparently corrupted text, including misplaced headings, addresses, and effective-date language.
• The final policy should be reconstructed from a clean version before publication.

Privacy Policy Change Summary

Overall assessment

The revised policy materially broadens the circumstances in which Proposify may disclose or transfer personal information and gives Proposify more flexibility to use vendors and service providers. It also changes the policy’s amendment process and reorganizes individual-rights and California-specific provisions.

Customer data use and AI-model training

• No express authorization or prohibition concerning AI training appears in the diff. The revised policy does not state whether customer content or personal information may be used to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.
• The new language permits sharing information with developers, data analysts, support administrators, designers, network technicians, and other vendors to “maintain and improve the Services.”
• It also permits vendors to store data uploaded to Proposify and support or improve the Services. Although this could potentially be broad enough to encompass AI-related processing, the policy does not clearly say so.
• Customers should seek clarification on whether uploaded content, personal information, prompts, outputs, or usage data may be used for AI training, whether data is anonymized, whether customers can opt out, and how long training data is retained.

Expanded sharing and disclosure

• The prior restriction against sharing information with third parties without permission is replaced with multiple exceptions, including:
• Credit-card processors;
• Integration partners, at the customer’s request;
• Contractors and vendors supporting, maintaining, storing, or improving the Services;
• Legal, financial, and other professional advisers;
• Third parties receiving information with consent;
• Disclosures required by law or considered necessary to investigate fraud, illegal activity, threats to safety, or protect Proposify’s rights.
• Proposify may transfer personal information to a third party if the Website is assigned or sold. The policy adds notice by email or another electronic method, but does not promise consent or an opportunity to object.
• Aggregate anonymous information may be shared for service improvement or marketing. The policy should clarify the anonymization standard and whether re-identification is prohibited.

Customer rights and California disclosures

• The revised text preserves or clarifies the ability to review, update, delete, and correct personal information.
• Requests may be made by email, and Proposify states it will take reasonable steps to provide account access.
• California users receive a more detailed right to request categories of shared personal information and the names and addresses of recipient businesses for direct-marketing purposes.

Policy changes and communications

• Proposify may amend the Privacy Policy at its sole discretion and without prior notice; users are told to check back periodically.
• Email use is expanded to notices required by law, service information, and complaint resolution. This is not necessarily marketing consent.
• The diff contains inconsistent dates: the heading says May 27, 2025, while the closing statement says the policy was modified May 25, 2025.

Summary

The diff only states that approximately 311 words were removed, but does not identify which provisions were deleted or provide the surrounding contract language.

AI Training and Data Use

• It is not possible to determine whether the changes affect:
• Use of customer data to train, fine-tune, or improve AI models;
• Whether customer content may be used for generalized model training;
• Whether use is limited to service delivery, security, or abuse monitoring;
• Opt-out, consent, or deletion rights;
• Whether human reviewers or third-party model providers may access customer data;
• Ownership, licensing, confidentiality, or anonymization protections for customer data.

Potential Legal Risks

Because the deleted language is unavailable, the following risks cannot be confirmed but should be specifically investigated:

1. Broader data-use rights

Deleted restrictions may have limited the provider’s ability to use customer content for model training or product improvement.

2. Loss of customer protections

Removed language may have included confidentiality obligations, data minimization requirements, retention limits, or deletion commitments.

3. Removal of opt-out or consent requirements

The deletion may eliminate a customer’s ability to prohibit AI training use or require affirmative consent.

4. Changes to third-party access

Deleted provisions may have restricted disclosure of customer data to cloud providers, subprocessors, or external AI model providers.

5. Reduced accountability

Removed audit rights, transparency obligations, warranties, indemnities, or security commitments could increase the customer’s legal and operational exposure.

Recommended Next Step

The full before-and-after text—or at least the 311 deleted words and the provisions immediately before and after them—is required for a reliable analysis. Particular attention should be given to sections titled Data Use, Customer Data, Confidentiality, AI, Machine Learning, Product Improvement, Service Improvement, Subprocessors, Privacy, and License.

Key Changes and Risks

1. Customer data sharing is significantly expanded

The prior policy generally stated that personal information would not be shared with third parties without permission, subject to limited exceptions. The revised policy permits sharing with a much broader range of recipients, including:

• Credit-card processors;
• Integration partners, at the customer’s request;
• Developers, support administrators, designers, data analysts, and network technicians;
• Vendors that store uploaded Proposify data or support and improve the Services;
• Legal, financial, and other professional advisers;
• Third parties where required by law or believed necessary to investigate fraud, illegal activity, threats to safety, or protect the company’s rights;
• A purchaser or other third party in connection with a sale, assignment, or change of ownership of the Website.

Risk: The categories of vendors and purposes are broad, and the policy does not identify specific providers, jurisdictions, retention periods, security requirements, or contractual restrictions applicable to all recipients.

2. No express AI-model training authorization—but no clear prohibition

The diff does not expressly state that customer data will be used to train, fine-tune, evaluate, or develop AI models, nor does it expressly prohibit that use.

However, the revised language allows information to be shared with:

• “Developers” and “data analysts”; and
• Third-party vendors that store uploaded data or “support and improve the Services.”

Those purposes could potentially include analytics, automated systems, or AI development, depending on how the company interprets “improve.” The policy does not say whether customer-uploaded content, prompts, outputs, personal information, or aggregated data may be used for AI training.

AI-related risk: Customers do not receive a clear opt-in, opt-out, deletion right, confidentiality commitment, or assurance that their data will not be incorporated into third-party or generally available AI models. Customers handling confidential, regulated, or proprietary information should seek a contractual clarification.

3. Aggregate and anonymous information may be used for marketing

The revised policy expressly permits sharing aggregate anonymous information with third parties to improve the Website and Services or for marketing. Although described as anonymous, the policy does not define the de-identification standard or address re-identification risk.

4. Government, fraud, safety, and legal disclosures are broader

The new language permits disclosure based on the company’s belief that disclosure is required or necessary to investigate suspected fraud, illegal activity, threats to physical safety, or to comply with legal process. This is broader than the previous fraud-focused wording.

5. Customer access rights are clarified

Customers may review, update, delete, or correct personal information through their account. If access is unavailable, the policy directs customers to contact support@proposify.com. California users receive expanded wording regarding categories of information shared and the businesses receiving it.

6. Policy changes may occur without prior notice

The company may amend the Privacy Policy at its sole discretion and without prior notice, with customers instructed to check periodically. This creates a risk that future data-use practices—including AI-related practices—could change without direct notification or consent.

Drafting note: The document states it was last updated May 27, 2025, but later says it was last modified May 25, 2025.

Summary of Important Changes and Risks

1. Use of Customer Data to Train AI Models

• No express provision authorizes or prohibits using customer data to train, fine-tune, evaluate, or improve artificial intelligence or machine-learning models.
• The prior language referred generally to sharing anonymous aggregate information and sharing data with vendors to “support and improve the Services.” Those concepts appear to be removed or substantially narrowed.
• The revised language does not clearly state whether customer content, personal information, uploaded documents, usage data, or anonymized data may be used for AI development.
• Risk: The policy remains ambiguous. A customer could argue that AI training is not adequately disclosed, while the provider could potentially rely on broad “use” or “improve the Services” language elsewhere in the agreement. A separate, explicit AI-data-use clause would be advisable.

2. Third-Party Sharing

• The policy changes from permitting specified sharing with payment processors, integration partners, vendors, contractors, professional advisers, and service providers to stating that, except as otherwise provided, the company will not share information with third parties without permission.
• However, the revised text still describes sharing with third parties for:
• Direct marketing purposes under California law;
• International data transfers; and
• Other purposes potentially addressed elsewhere in the Privacy Policy or Terms of Service.
• Risk: The apparent “no sharing without permission” promise may conflict with other provisions allowing transfers or disclosures. The scope of “permission” is also unclear—whether it means consent, contractual necessity, or continued use of the service.

3. Access and Correction Rights

• The policy now says users can review, update, delete, or correct personal information in their account.
• It also adds a process for contacting the company if the user cannot access the account.
• The language concerning requests is reorganized and partially replaced, potentially making the procedure less clear.
• Risk: The policy does not clearly state applicable response deadlines, verification requirements, retention exceptions, or whether deletion applies to backups and third-party processors.

4. Marketing and California Disclosures

• The revised policy adds or clarifies California “Shine the Light” disclosures concerning sharing information with third parties for their own direct marketing.
• It provides an email-based request process and limits disclosures to information covered by that law.
• Risk: The policy addresses only a narrow California right and does not comprehensively describe broader state privacy rights, such as access, deletion, correction, opt-out, or sensitive-data rights where applicable.

5. International Transfers

• The policy adds language stating that continued use constitutes consent to transfer personal information to the United States.
• It states that U.S. law and the Privacy Policy govern those transfers.
• Risk: This may be insufficient for jurisdictions requiring specific transfer mechanisms, transparency, lawful bases, or rights notices, particularly in the European Economic Area.

6. Unilateral Policy Changes

• The company may amend the Privacy Policy at its sole discretion and without prior notice.
• Users are told to check the policy periodically.
• Risk: Material changes—including future AI-data-use permissions—could take effect without direct notice or affirmative consent.

7. Other Notable Changes

• A new statement says Proposify claims no rights in customer intellectual property stored or used by customers.
• Fraud-warning language is expanded.
• The document contains apparent drafting inconsistencies, including different dates (May 27, 2025 versus May 25, 2025) and repetitive or corrupted text. These issues may create interpretation and enforceability concerns.

Summary of Important Changes

1. Expanded disclosure of personal information

The revised policy substantially broadens the categories of recipients and purposes for sharing customer information:

• Personal information may be shared with third-party contractors, including developers, support administrators, designers, data analysts, and network technicians.
• Vendors may manage and store data uploaded to Proposify and support or improve the Services.
• Information may be shared with integration partners at the customer’s request.
• Personal information may be shared with legal, financial, and other professional advisers.
• Sharing is permitted where required by law, to investigate suspected fraud or illegal activity, protect physical safety, or comply with legal process.
• Personal information may be transferred to a third party if the Website is assigned or sold, with notice by email or through the Service.

Risk: The former language generally restricted third-party disclosure absent permission. The replacement creates broader, more operationally flexible sharing rights and does not clearly limit vendors to specific processing instructions, retention periods, security standards, or confidentiality obligations.

2. AI-model training and automated processing

The diff does not expressly state that customer data may be used to train artificial intelligence or machine-learning models. It also does not expressly prohibit such use.

However, the new permissions to share information with:

• developers,
• data analysts,
• third-party vendors, and
• service providers supporting or improving the Services

could potentially be interpreted as broad enough to permit analytics, model development, or AI-related product improvement—particularly because “support and improve the Services” is undefined.

The policy should clearly state whether customer content, personal information, usage data, or de-identified data may be used to train, fine-tune, evaluate, or improve AI models, and whether third-party AI providers may receive that data. The current wording creates ambiguity and customer-consent risk.

3. Aggregate and anonymous information

The policy newly permits sharing aggregate anonymous information with third parties for service improvement or marketing.

Risk: “Aggregate anonymous” is not defined. The policy should clarify whether data is irreversibly de-identified and whether re-identification is prohibited.

4. Reduced or altered access language

The prior commitment to take reasonable steps to provide account access is replaced with access to personal information maintained by Proposify, with support contact instructions.

The revised policy does not clearly address access to customer-uploaded content, portability, deletion, correction, or response times.

5. Broader legal and safety exceptions

Disclosure exceptions now include suspected fraud, illegal activity, threats to physical safety, and legal requirements. These are broader and more detailed than the previous fraud-focused language.

6. Policy changes and other issues

• Proposify may amend the Privacy Policy at its sole discretion and without prior notice.
• The policy reinstates provisions concerning children under 13 and email communications.
• California disclosure-right language is reformulated but remains generally present.
• The document contains apparent inconsistencies: the heading says “Last updated on May 27, 2025,” while the footer says it was modified on May 25, 2025.
• The diff appears heavily duplicated and grammatically disjointed; the final published version should be reviewed for coherence and enforceability.

Summary

The diff only states that approximately 311 words were removed; it does not identify which provisions were deleted or provide the replacement text.

Key Legal Implications

• Scope of changes cannot be determined: Without the deleted language, it is impossible to assess whether the changes affect liability, confidentiality, data protection, intellectual property, termination, warranties, or other rights.
• Potential loss of customer protections: Deleted provisions could have limited the provider’s use of data, imposed security obligations, required notice of breaches, or provided indemnification and audit rights.
• Potential expansion of provider rights: If the removed language contained restrictions or consent requirements, its deletion may give the provider broader contractual discretion.
• No conclusion possible regarding AI training: The available diff does not show whether customer data may now be:
• used to train, fine-tune, or improve AI models;
• shared with affiliates, vendors, or model providers;
• retained for training after contract termination; or
• excluded from training or used only in anonymized form.

Recommended Review

Obtain either:

1. the full original and revised versions; or

2. the actual redline showing the 311 deleted words and any surrounding provisions.

Particular attention should be given to terms such as “customer data,” “content,” “improve,” “develop,” “train,” “machine learning,” “artificial intelligence,” “service improvement,” “de-identified,” “aggregated,” “subprocessors,” and “retention.”

Until the deleted text is reviewed, no reliable determination can be made about whether the amendment creates new risks or changes the customer’s consent regarding AI model training.

Privacy Policy Diff Summary

Key Changes and Risks

1. Expanded sharing with service providers

The policy now expressly permits sharing personal information with:

• Third-party contractors, including developers, support administrators, designers, data analysts, and network technicians;
• Vendors that manage or store data uploaded to Proposify; and
• Vendors that support or improve the Services.

Risk: This materially broadens the categories of recipients beyond payment processors and other previously limited disclosures. The policy does not identify the vendors, specify retention periods, or clearly describe the contractual privacy and security restrictions applicable to them.

2. Integration exports

The revised policy states that Proposify may export data, at the customer’s request, to “integration partners.”

Risk: The scope of “data” is not limited to non-personal information. Customers may need to assess whether personal information or confidential business content could be transferred to third-party integrations and what those parties may do with it.

3. Aggregate and anonymous information

Proposify may share aggregate anonymous information with third parties to improve the Website and Services or for marketing.

Risk: Although described as anonymous, the policy does not explain the de-identification standard or prohibit re-identification. “Marketing purposes” is broader than service operation.

4. Broader legal and safety disclosures

The revised policy permits disclosure where Proposify believes it is necessary to:

• Investigate, prevent, or act against illegal activity or suspected fraud;
• Address a potential threat to a third party’s physical safety;
• Comply with law; or
• Protect Proposify’s rights.

It also permits transfer of personal information to a third party following an assignment or other change in ownership of the Website, with notice by email.

Risk: These are broad, largely discretionary disclosure standards. The ownership-transfer provision could result in customer information moving to a successor without affirmative consent.

5. Professional advisers

The policy newly permits sharing personal information with legal, financial, and other professional advisers.

Risk: The provision is not limited by purpose, confidentiality obligations, or data minimization.

AI Training / Model Use

No express provision regarding AI training was added or removed in the supplied diff. The revised language does not expressly authorize or prohibit using customer data, uploaded documents, or personal information to train, fine-tune, evaluate, or improve AI models.

However, the new permissions to share uploaded data with vendors “to support and improve the Services,” and to share information with data analysts and other contractors, could create ambiguity about whether customer content may be used in AI-related development. Customers should seek express written confirmation that their data and uploaded content will not be used to train generalized AI models without consent.

Other Notable Changes

• The policy is labeled “Last updated on May 27, 2025,” while the closing text says it was modified on May 25, 2025; this inconsistency should be corrected.
• Customer access and correction rights are restated, including support contact procedures.
• California disclosures are reframed to provide rights to request categories of personal information shared and the names and addresses of recipient businesses.
• The policy appears to retain the prohibition on knowingly collecting information from children under 13.
• The amendment language remains broad, stating the policy may be changed at Proposify’s sole discretion and without prior notice.

Structured Summary of Important Changes

1. AI-model training and use of customer data

• No express provision addressing AI training was added or removed. The diff does not state whether customer data, uploaded content, or account information may be used to train, fine-tune, evaluate, or improve generative-AI or other machine-learning models.
• The prior language referred generally to sharing aggregate anonymous information and sharing data with vendors to “support and improve the Services.” Those references appear to be replaced or relocated, but the revised text still does not clarify whether “improve” includes AI training.
• Risk: The policy leaves a significant ambiguity for customers concerned that uploaded proposals, documents, personal information, or usage data could be used in AI systems. A separate, explicit AI-data-use provision would be advisable, addressing:
• whether customer content is used for model training;
• whether data is de-identified or aggregated first;
• whether third-party AI providers receive the data;
• retention, deletion, and opt-out rights; and
• whether customer data is used only to provide the service or also for the provider’s independent purposes.

2. Third-party sharing

• The policy changes from describing specific sharing arrangements—such as credit-card processors, integration partners, vendors storing uploaded data, contractors, and professional advisers—to the broader statement: “Except as provided above, we will not share any of your information to any third party without permission.”
• This sounds more protective, but it may be misleading because other provisions still permit disclosure or transfer, including:
• California direct-marketing disclosures;
• international transfers to the United States;
• disclosures required by the operative Privacy Policy or Terms of Service; and
• any exceptions stated elsewhere in the policy.
• Risk: “Without permission” may create an overly broad promise and conflict with necessary service-provider, legal, security, corporate-transaction, or analytics disclosures.

3. International data transfers

• International users are now told that continued use constitutes consent to transfer personal information into the United States.
• Risk: Continued-use consent may be insufficient under some privacy regimes, particularly where valid consent must be specific, informed, freely given, and withdrawable. The provision also does not identify safeguards, transfer mechanisms, data-subject rights, or complaint procedures.

4. Policy changes and incorporation

• The provider may amend the policy at its sole discretion and without prior notice. Use of information is governed by the policy in effect when used, and the policy is incorporated into the Terms of Service.
• Risk: This permits material changes—including potentially broader data use—without direct notification or renewed consent.

5. Customer intellectual property

• A new statement says Proposify holds no claim or rights to intellectual property used and stored by customers.
• This is helpful, but it does not expressly grant the provider the limited license needed to host, process, secure, back up, or technically deliver the services, nor does it resolve ownership of derived data, analytics, or AI outputs.

Executive Summary

The revised Privacy Policy materially broadens the circumstances in which customer information may be shared, adds new service-provider categories, changes access and amendment provisions, and adds fraud, safety, legal-process, and business-transfer disclosures. The diff does not expressly mention artificial intelligence, machine learning, model training, prompts, inputs, outputs, or use of customer data to train AI models.

Key Changes and Risks

1. Expanded sharing with vendors and contractors

The policy newly permits sharing personal information with:

• Integration partners, when the customer requests a data export;
• Developers, support administrators, designers, data analysts, and network technicians;
• Vendors that manage or store data uploaded to Proposify;
• Vendors that support or improve the Services;
• Legal, financial, and other professional advisers.

Risk: The vendor language is broad and does not identify specific vendors, geographic locations, retention periods, security requirements, or contractual limits on secondary use. Although payment processors are stated to be prohibited from using personally identifiable information for promotional purposes, equivalent restrictions are not clearly stated for all other vendors.

2. Possible marketing use

The revised language permits sharing aggregate anonymous information for Website and Service improvement or marketing. It also preserves or clarifies California-related disclosures concerning sharing personal information with third parties for their own direct marketing purposes.

Risk: “Aggregate anonymous” information may still create re-identification concerns if aggregation or anonymization standards are not defined. The policy should distinguish clearly between anonymous, de-identified, pseudonymous, and personal information.

3. New legal, fraud, and safety disclosures

Personal information may be shared where Proposify believes disclosure is required or necessary to:

• Comply with judicial or legal process;
• Protect Proposify’s rights;
• Investigate or prevent illegal activity or suspected fraud;
• Address threats to physical safety; or
• Comply with other legal obligations.

Risk: Some triggers rely on Proposify’s subjective belief, potentially allowing disclosure without a court order or customer consent.

4. Business transfers

The policy adds permission to transfer personal information to a third party if the Website is assigned, with notice by email or another stated method.

Risk: Customer data may be transferred during a sale, merger, or restructuring. The policy does not explain whether the recipient must honor the existing privacy commitments or whether customers can object or delete their data.

5. Access and correction rights

The revised policy provides that customers may review, update, delete, or correct information in their account, and may email support if they cannot access it.

Positive change: This is more specific and potentially more helpful than the former general access language.

6. Policy changes

The policy changes from permitting amendments at the company’s discretion to stating that Proposify will “never initiate a request for personal information” and may amend the policy at any time without prior notice. This wording appears internally inconsistent or technically defective.

Risk: Customers may receive little or no advance notice of material privacy changes and may be expected to monitor the policy themselves.

7. AI-model training

No express authorization or prohibition regarding use of customer data to train AI models appears in the supplied diff. The new references to using data to “support and improve the Services” are broad enough to warrant clarification, but they do not expressly state that customer data may be used for AI training.

8. Drafting issues

The policy states both “Last updated on May 27, 2025” and that it was modified on May 25, 2025. The repeated and fragmented diff also suggests the final policy should be reviewed for grammatical and sequencing errors before publication.

Summary of the Change

• The diff states that approximately 311 words were removed from the document.
• However, the actual deleted text is not provided—only a placeholder indicating its approximate length.

Legal and Commercial Impact

Because the deleted language is unavailable, it is not possible to determine:

• Which rights, obligations, warranties, or limitations were removed.
• Whether liability, indemnity, confidentiality, security, audit, termination, or compliance provisions changed.
• Whether any customer protections or provider rights were eliminated.
• Whether the deletion creates ambiguity or shifts risk to the customer.

A deletion can be legally significant even if no replacement language appears. Removing a restriction, consent requirement, warranty, or security commitment may expand the provider’s discretion or reduce the customer’s remedies.

AI Training and Customer Data

The provided diff does not identify whether customer data may be used to train AI models. In particular, it is impossible to determine whether the deleted text addressed:

• Use of customer data, prompts, outputs, or usage information for model training or improvement.
• Whether training is conducted by the provider or third-party AI vendors.
• Customer consent, opt-out, or default enrollment.
• De-identification, aggregation, or anonymization requirements.
• Ownership or licensing rights in customer data, inputs, and outputs.
• Retention and deletion of data used for training.
• Restrictions on using confidential, personal, regulated, or sensitive information.
• Notice or approval requirements for changes to AI-data practices.

Risk Assessment

The deletion should be treated as unresolved and potentially material, particularly if the removed provisions previously limited use of customer data or prohibited AI training. The available information does not support a conclusion that AI-training rights were added, removed, or narrowed.

Recommended Next Step

Obtain the full redline or the approximately 311 deleted words, together with the surrounding provisions. Review specifically for terms such as “train,” “improve,” “machine learning,” “AI,” “models,” “inputs,” “prompts,” “outputs,” “customer data,” “de-identified,” “aggregated,” “service improvement,” and “third-party providers.”

Key Changes and Risks

1. Expanded disclosure of customer information

The revised policy substantially broadens the circumstances in which Proposify may share personal information:

• Third-party contractors may access information to maintain and improve the Services, including developers, support administrators, designers, data analysts, and network technicians.
• Third-party vendors may manage and store data uploaded to Proposify and support or improve the Services.
• Information may be shared with integration partners at the customer’s request.
• Information may be shared with legal, financial, and other professional advisers.
• Personal information may be transferred to a third party following an assignment or change in ownership/control of the Website, with notice by email.
• Disclosure is permitted where Proposify believes it is necessary to investigate or prevent illegal activity, suspected fraud, threats to physical safety, or as otherwise required by law.

Risk: Customer data may be accessible to a wider range of vendors and personnel. The policy does not specify vendor identities, retention limits, security standards, geographic locations, or whether vendors may use data for their own purposes.

2. Customer data and AI-model training

The diff contains no express authorization to use customer data to train, fine-tune, or improve AI models, and no express prohibition on such use.

However, the new permission to share uploaded data with vendors “to support and improve the Services” is broad. If Proposify or its vendors use AI systems to improve the Services, this language could create ambiguity about whether customer content may be processed for model development or training.

Risk: Customers do not receive a clear commitment that uploaded content, personal information, or derived information will be excluded from AI training. A separate contractual or policy statement should clarify:

• whether customer data may be used for AI training;
• whether data is anonymized or aggregated first;
• whether third-party AI providers may retain or reuse prompts, outputs, or content;
• whether customers can opt out; and
• whether confidential data is segregated from model-training datasets.

3. Access and correction rights revised

The policy now expressly states that customers may review, update, delete, or correct personal information and provides a support email process if account access is unavailable.

This is clearer operationally, but the policy no longer appears to promise the former “all reasonable steps” language in the same context as broadly as before. It also does not state response deadlines, verification requirements, or limits on deletion.

4. California privacy disclosures

The California section is reorganized and more specifically describes the right to request:

• categories of personal information shared; and
• the categories and names of businesses receiving it for direct marketing.

This may improve transparency, but the revised wording should be checked against current California privacy-law requirements and the company’s actual sharing practices.

5. Policy-change rights

Proposify now states it may amend the Privacy Policy at any time, at its sole discretion, without prior notice, and that the policy in effect at the time of use governs.

Risk: Material privacy changes—including future AI-data practices—could take effect without advance notice or consent.

6. Drafting and date issues

The heading says “Last updated on May 27, 2025,” while the closing statement says the policy was modified on May 25, 2025. This inconsistency should be corrected.

Summary of Important Changes

AI Model Training

• No express change addresses AI, machine learning, or model training.
• The revised policy does not expressly authorize Proposify or its vendors to use customer content or personal information to train, fine-tune, evaluate, or improve AI models.
• It also does not expressly prohibit such use. The broader references to “use of information,” service improvement, data handling, and third-party disclosures could leave uncertainty about whether customer data might be used for AI-related purposes.
• Customers should seek clarification on whether uploaded documents, proposals, prompts, usage data, or personal information are:
• used to train Proposify’s or third parties’ AI models;
• shared with AI providers;
• retained after account deletion; or
• excluded from model training through contractual or technical controls.

Information Sharing

• The prior policy expressly permitted sharing with payment processors, integration partners, contractors, data-storage vendors, and others supporting or improving the Services.
• The revised language states: “Except as provided above, we will not share any of your information to any third party without permission.”
• This appears more restrictive, but “provided above” is unclear and may preserve exceptions elsewhere in the policy or related terms.
• Specific descriptions of contractors and vendors have largely been removed, reducing transparency about categories of recipients and their permitted uses.
• California-specific language now acknowledges sharing customer information with third parties for their own direct marketing purposes and provides a request procedure for disclosure of recipient categories and business names.

Customer Access and Control

• The policy now states that users can review, update, delete, or correct personal information in their account.
• The prior commitment to take reasonable steps to provide access if a user could not access the account has been replaced with a less direct instruction to contact Proposify. The practical process and response obligations are less clear.

International Transfers

• International users are told that continued use constitutes consent to transfer personal information to the United States.
• The policy emphasizes that U.S. law governs and that the policy is incorporated into the Terms of Service.
• This may be inadequate or problematic for jurisdictions requiring specific transfer mechanisms, lawful bases, or more detailed disclosures.

Policy Changes

• Proposify may amend the policy at its sole discretion and without prior notice.
• Users are instructed to check the policy periodically. This creates a risk that material changes—including future AI-data practices—could take effect without direct notification or affirmative consent.

Other Changes

• New language says Proposify claims no rights in customer intellectual property used or stored by customers.
• The policy adds fraud-reporting, children’s privacy, contact, and California privacy provisions.
• The effective-date language states the policy was last modified May 25, 2025, despite the prior heading referring to May 27, 2025; this inconsistency should be corrected.

Summary

The diff only states that approximately 311 words were removed; it does not identify which provisions were deleted or provide replacement language.

Key legal impacts

• Substantive analysis is not possible: Without the deleted text, it is impossible to determine whether the changes affect liability, confidentiality, intellectual property, data protection, termination, warranties, or other obligations.
• Potential risk from deleted protections: Removing language may eliminate customer rights, provider obligations, limitations on data use, security commitments, audit rights, or remedies. The significance depends entirely on the missing provisions.
• No identifiable AI-training change: The provided diff does not show whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models. It is therefore not possible to conclude whether:
• customer data may now be used for model training;
• training requires consent or opt-in;
• de-identification or aggregation is required;
• customer data may be shared with affiliates or third-party model providers; or
• training-use restrictions or deletion obligations were removed.

Recommended next step

Provide the actual redline or the text of the approximately 311 deleted words, together with any surrounding provisions. Particular attention should be given to terms such as “customer data,” “content,” “inputs,” “outputs,” “service improvement,” “machine learning,” “artificial intelligence,” “train,” “fine-tune,” “de-identify,” and “aggregated data.”

The publisher records this document as revised on this date (“updated on May 27, 2025”).

Summary

Information Provided

The diff only states:

> “Added approximately 311 words to the document”

No actual contract language or marked-up additions were included.

Legal and AI-Training Analysis

Because the text of the additions is unavailable, it is not possible to determine:

• What contractual rights or obligations changed.
• Whether liability, indemnity, confidentiality, security, or termination provisions were modified.
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• Whether such use is limited to de-identified, aggregated, or anonymized data.
• Whether customer consent is required for AI training.
• Whether the provider may share data with affiliates, subprocessors, or third-party model providers.
• Whether the customer can opt out of AI training or request deletion of training-related data.
• Whether ownership of inputs, outputs, or derived data has changed.
• Whether the provider makes commitments concerning model confidentiality, data retention, or regulatory compliance.

Risk Assessment

No specific new legal risks can be identified from the information provided. The statement that approximately 311 words were added does not reveal the substance, scope, or effect of those additions.

Information Needed

Please provide the actual redline or the full text of the 311 added words, using the stated notation:

• {added text}
• [deleted text]
• [old text]{new text}

Once provided, the additions can be analyzed for customer-data use, AI-model training rights, consent and opt-out mechanisms, ownership, confidentiality, retention, third-party disclosures, and other material risks.

Privacy Policy Diff Summary

Executive Summary

The diff appears to replace much of the prior privacy policy with a substantially different, shorter policy. The markup is highly repetitive and appears technically malformed in places, so the final published text should be reviewed carefully for unintended omissions or duplicated language.

Important Changes and Risks

1. Customer-data sharing is described differently

The prior policy expressly allowed sharing with:

• Credit-card processors, subject to restrictions on use;
• Third-party integration partners;
• Contractors such as developers, support personnel, designers, analysts, and network technicians;
• Vendors that manage and store data uploaded to Proposify;
• Third parties receiving aggregate anonymous information to improve the website and services;
• Legal, financial, and professional advisers.

The replacement generally states that Proposify will not share information with third parties without permission, except as otherwise provided. However, the new language does not clearly identify all service providers, processors, integrations, advisers, or other operational recipients. This may create ambiguity about how customer data is handled and whether previously stated safeguards still apply.

2. No express AI-training authorization appears

The diff contains no express provision authorizing Proposify to use customer data, uploaded content, personal information, or de-identified information to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.

The prior reference to sharing “aggregate anonymous information” to improve the services is removed. That deletion may reduce an expressly stated analytics/improvement permission, but it does not clearly prohibit AI training. The revised policy should therefore be checked alongside the Terms of Service, product terms, and any AI-specific terms, where such rights may appear instead.

3. Customer access rights are narrowed or made less clear

The prior policy allowed users to review, update, delete, or correct personal information and included a process for inaccessible accounts. The replacement primarily discusses contacting Proposify for information about access and use. It may no longer clearly promise correction or deletion rights or specify response procedures.

4. California disclosure language is added

California users receive a new “Shine the Light” disclosure process concerning categories of information shared for third-party direct marketing and the identities of recipient businesses. This is a new transparency right, but it is limited to sharing covered by that law and does not necessarily provide a broader opt-out.

5. International transfers and consent

International users are told that continued use constitutes consent to transfer personal information to the United States. This is a broad transfer statement and may be insufficient by itself for jurisdictions requiring specific transfer mechanisms, disclosures, or consent standards.

6. Unilateral policy changes

The revised policy says Proposify may amend the policy at its sole discretion and without prior notice, requiring users to check back periodically. This increases customer risk because material privacy changes may take effect without direct notification.

7. Customer intellectual property

A new statement says Proposify claims no rights in intellectual property used and stored by customers. This is favorable in principle, but it does not explain operational licenses needed to host, process, secure, or provide the services. Those rights should be confirmed in the Terms of Service.

Key Changes and Risks

1. AI-powered features and customer data

The revised terms add or clarify provisions concerning AI-powered features:

• Customers remain the sole owners of their inputs submitted to AI features.
• The terms direct users to the Privacy Policy for further information about data handling and processing.
• The excerpt does not expressly state whether customer inputs, outputs, or other Service data may be used to train Proposify’s or a third party’s AI models.
• It also does not clearly state:
• whether customer data is used for model training, fine-tuning, evaluation, or product improvement;
• whether training is opt-in or opt-out;
• whether data is anonymized or de-identified before use;
• whether third-party AI providers receive the data;
• how long AI inputs and outputs are retained; or
• whether confidential information should be excluded from AI features.

Risk: Ownership of inputs does not necessarily prevent Proposify or its vendors from using those inputs for operational or model-development purposes. Customers should review the referenced Privacy Policy and Data Processing Addendum, especially any provisions on service improvement, automated processing, subprocessors, retention, and aggregated or de-identified data. If AI training is not addressed there, the contractual position remains unclear.

2. New update date

The title now states: “Terms of Service — Last updated on October 15, 2025.”

This helps identify the applicable version but does not itself change substantive rights. Customers should preserve a copy of the prior terms for comparison and recordkeeping.

3. Mandatory arbitration and class-action waiver

The document now includes a heading referring to:

• Mandatory arbitration;
• Exceptions;
• Waiver of class-action rights; and
• A limitations period.

The excerpt does not include the operative language, so the full impact cannot be determined. If new, this could materially restrict the customer’s ability to sue in court, participate in a class action, or bring claims after the stated deadline. The complete section should be reviewed carefully, including governing law, arbitration location and rules, available remedies, opt-out rights, and exceptions.

4. Contact information

An email address—support@proposify.com—is added alongside the postal address. This may provide a more practical method for notices or support, but the terms should clarify whether email is legally effective for formal notices.

5. Apparent formatting and drafting changes

Numerous changes remove spaces around headings and sentences, for example “AvailabilityWe're,” “AccountTo,” and “PrivacyProposify.” These appear primarily editorial, but they reduce readability and could create ambiguity about section boundaries. The final published version should be checked to ensure no headings or operative provisions have been accidentally merged or omitted.