Proposify

Summary of Important Changes and Risks

1. Use of Customer Data to Train AI Models

• No express provision authorizes or prohibits using customer data to train, fine-tune, evaluate, or improve artificial intelligence or machine-learning models.
• The prior language referred generally to sharing anonymous aggregate information and sharing data with vendors to “support and improve the Services.” Those concepts appear to be removed or substantially narrowed.
• The revised language does not clearly state whether customer content, personal information, uploaded documents, usage data, or anonymized data may be used for AI development.
• Risk: The policy remains ambiguous. A customer could argue that AI training is not adequately disclosed, while the provider could potentially rely on broad “use” or “improve the Services” language elsewhere in the agreement. A separate, explicit AI-data-use clause would be advisable.

2. Third-Party Sharing

• The policy changes from permitting specified sharing with payment processors, integration partners, vendors, contractors, professional advisers, and service providers to stating that, except as otherwise provided, the company will not share information with third parties without permission.
• However, the revised text still describes sharing with third parties for:
• Direct marketing purposes under California law;
• International data transfers; and
• Other purposes potentially addressed elsewhere in the Privacy Policy or Terms of Service.
• Risk: The apparent “no sharing without permission” promise may conflict with other provisions allowing transfers or disclosures. The scope of “permission” is also unclear—whether it means consent, contractual necessity, or continued use of the service.

3. Access and Correction Rights

• The policy now says users can review, update, delete, or correct personal information in their account.
• It also adds a process for contacting the company if the user cannot access the account.
• The language concerning requests is reorganized and partially replaced, potentially making the procedure less clear.
• Risk: The policy does not clearly state applicable response deadlines, verification requirements, retention exceptions, or whether deletion applies to backups and third-party processors.

4. Marketing and California Disclosures

• The revised policy adds or clarifies California “Shine the Light” disclosures concerning sharing information with third parties for their own direct marketing.
• It provides an email-based request process and limits disclosures to information covered by that law.
• Risk: The policy addresses only a narrow California right and does not comprehensively describe broader state privacy rights, such as access, deletion, correction, opt-out, or sensitive-data rights where applicable.

5. International Transfers

• The policy adds language stating that continued use constitutes consent to transfer personal information to the United States.
• It states that U.S. law and the Privacy Policy govern those transfers.
• Risk: This may be insufficient for jurisdictions requiring specific transfer mechanisms, transparency, lawful bases, or rights notices, particularly in the European Economic Area.

6. Unilateral Policy Changes

• The company may amend the Privacy Policy at its sole discretion and without prior notice.
• Users are told to check the policy periodically.
• Risk: Material changes—including future AI-data-use permissions—could take effect without direct notice or affirmative consent.

7. Other Notable Changes

• A new statement says Proposify claims no rights in customer intellectual property stored or used by customers.
• Fraud-warning language is expanded.
• The document contains apparent drafting inconsistencies, including different dates (May 27, 2025 versus May 25, 2025) and repetitive or corrupted text. These issues may create interpretation and enforceability concerns.

Summary of Important Changes

1. Expanded disclosure of personal information

The revised policy substantially broadens the categories of recipients and purposes for sharing customer information:

• Personal information may be shared with third-party contractors, including developers, support administrators, designers, data analysts, and network technicians.
• Vendors may manage and store data uploaded to Proposify and support or improve the Services.
• Information may be shared with integration partners at the customer’s request.
• Personal information may be shared with legal, financial, and other professional advisers.
• Sharing is permitted where required by law, to investigate suspected fraud or illegal activity, protect physical safety, or comply with legal process.
• Personal information may be transferred to a third party if the Website is assigned or sold, with notice by email or through the Service.

Risk: The former language generally restricted third-party disclosure absent permission. The replacement creates broader, more operationally flexible sharing rights and does not clearly limit vendors to specific processing instructions, retention periods, security standards, or confidentiality obligations.

2. AI-model training and automated processing

The diff does not expressly state that customer data may be used to train artificial intelligence or machine-learning models. It also does not expressly prohibit such use.

However, the new permissions to share information with:

• developers,
• data analysts,
• third-party vendors, and
• service providers supporting or improving the Services

could potentially be interpreted as broad enough to permit analytics, model development, or AI-related product improvement—particularly because “support and improve the Services” is undefined.

The policy should clearly state whether customer content, personal information, usage data, or de-identified data may be used to train, fine-tune, evaluate, or improve AI models, and whether third-party AI providers may receive that data. The current wording creates ambiguity and customer-consent risk.

3. Aggregate and anonymous information

The policy newly permits sharing aggregate anonymous information with third parties for service improvement or marketing.

Risk: “Aggregate anonymous” is not defined. The policy should clarify whether data is irreversibly de-identified and whether re-identification is prohibited.

4. Reduced or altered access language

The prior commitment to take reasonable steps to provide account access is replaced with access to personal information maintained by Proposify, with support contact instructions.

The revised policy does not clearly address access to customer-uploaded content, portability, deletion, correction, or response times.

5. Broader legal and safety exceptions

Disclosure exceptions now include suspected fraud, illegal activity, threats to physical safety, and legal requirements. These are broader and more detailed than the previous fraud-focused language.

6. Policy changes and other issues

• Proposify may amend the Privacy Policy at its sole discretion and without prior notice.
• The policy reinstates provisions concerning children under 13 and email communications.
• California disclosure-right language is reformulated but remains generally present.
• The document contains apparent inconsistencies: the heading says “Last updated on May 27, 2025,” while the footer says it was modified on May 25, 2025.
• The diff appears heavily duplicated and grammatically disjointed; the final published version should be reviewed for coherence and enforceability.

Summary

The diff only states that approximately 311 words were removed; it does not identify which provisions were deleted or provide the replacement text.

Key Legal Implications

• Scope of changes cannot be determined: Without the deleted language, it is impossible to assess whether the changes affect liability, confidentiality, data protection, intellectual property, termination, warranties, or other rights.
• Potential loss of customer protections: Deleted provisions could have limited the provider’s use of data, imposed security obligations, required notice of breaches, or provided indemnification and audit rights.
• Potential expansion of provider rights: If the removed language contained restrictions or consent requirements, its deletion may give the provider broader contractual discretion.
• No conclusion possible regarding AI training: The available diff does not show whether customer data may now be:
• used to train, fine-tune, or improve AI models;
• shared with affiliates, vendors, or model providers;
• retained for training after contract termination; or
• excluded from training or used only in anonymized form.

Recommended Review

Obtain either:

1. the full original and revised versions; or

2. the actual redline showing the 311 deleted words and any surrounding provisions.

Particular attention should be given to terms such as “customer data,” “content,” “improve,” “develop,” “train,” “machine learning,” “artificial intelligence,” “service improvement,” “de-identified,” “aggregated,” “subprocessors,” and “retention.”

Until the deleted text is reviewed, no reliable determination can be made about whether the amendment creates new risks or changes the customer’s consent regarding AI model training.

Privacy Policy Diff Summary

Key Changes and Risks

1. Expanded sharing with service providers

The policy now expressly permits sharing personal information with:

• Third-party contractors, including developers, support administrators, designers, data analysts, and network technicians;
• Vendors that manage or store data uploaded to Proposify; and
• Vendors that support or improve the Services.

Risk: This materially broadens the categories of recipients beyond payment processors and other previously limited disclosures. The policy does not identify the vendors, specify retention periods, or clearly describe the contractual privacy and security restrictions applicable to them.

2. Integration exports

The revised policy states that Proposify may export data, at the customer’s request, to “integration partners.”

Risk: The scope of “data” is not limited to non-personal information. Customers may need to assess whether personal information or confidential business content could be transferred to third-party integrations and what those parties may do with it.

3. Aggregate and anonymous information

Proposify may share aggregate anonymous information with third parties to improve the Website and Services or for marketing.

Risk: Although described as anonymous, the policy does not explain the de-identification standard or prohibit re-identification. “Marketing purposes” is broader than service operation.

4. Broader legal and safety disclosures

The revised policy permits disclosure where Proposify believes it is necessary to:

• Investigate, prevent, or act against illegal activity or suspected fraud;
• Address a potential threat to a third party’s physical safety;
• Comply with law; or
• Protect Proposify’s rights.

It also permits transfer of personal information to a third party following an assignment or other change in ownership of the Website, with notice by email.

Risk: These are broad, largely discretionary disclosure standards. The ownership-transfer provision could result in customer information moving to a successor without affirmative consent.

5. Professional advisers

The policy newly permits sharing personal information with legal, financial, and other professional advisers.

Risk: The provision is not limited by purpose, confidentiality obligations, or data minimization.

AI Training / Model Use

No express provision regarding AI training was added or removed in the supplied diff. The revised language does not expressly authorize or prohibit using customer data, uploaded documents, or personal information to train, fine-tune, evaluate, or improve AI models.

However, the new permissions to share uploaded data with vendors “to support and improve the Services,” and to share information with data analysts and other contractors, could create ambiguity about whether customer content may be used in AI-related development. Customers should seek express written confirmation that their data and uploaded content will not be used to train generalized AI models without consent.

Other Notable Changes

• The policy is labeled “Last updated on May 27, 2025,” while the closing text says it was modified on May 25, 2025; this inconsistency should be corrected.
• Customer access and correction rights are restated, including support contact procedures.
• California disclosures are reframed to provide rights to request categories of personal information shared and the names and addresses of recipient businesses.
• The policy appears to retain the prohibition on knowingly collecting information from children under 13.
• The amendment language remains broad, stating the policy may be changed at Proposify’s sole discretion and without prior notice.

Structured Summary of Important Changes

1. AI-model training and use of customer data

• No express provision addressing AI training was added or removed. The diff does not state whether customer data, uploaded content, or account information may be used to train, fine-tune, evaluate, or improve generative-AI or other machine-learning models.
• The prior language referred generally to sharing aggregate anonymous information and sharing data with vendors to “support and improve the Services.” Those references appear to be replaced or relocated, but the revised text still does not clarify whether “improve” includes AI training.
• Risk: The policy leaves a significant ambiguity for customers concerned that uploaded proposals, documents, personal information, or usage data could be used in AI systems. A separate, explicit AI-data-use provision would be advisable, addressing:
• whether customer content is used for model training;
• whether data is de-identified or aggregated first;
• whether third-party AI providers receive the data;
• retention, deletion, and opt-out rights; and
• whether customer data is used only to provide the service or also for the provider’s independent purposes.

2. Third-party sharing

• The policy changes from describing specific sharing arrangements—such as credit-card processors, integration partners, vendors storing uploaded data, contractors, and professional advisers—to the broader statement: “Except as provided above, we will not share any of your information to any third party without permission.”
• This sounds more protective, but it may be misleading because other provisions still permit disclosure or transfer, including:
• California direct-marketing disclosures;
• international transfers to the United States;
• disclosures required by the operative Privacy Policy or Terms of Service; and
• any exceptions stated elsewhere in the policy.
• Risk: “Without permission” may create an overly broad promise and conflict with necessary service-provider, legal, security, corporate-transaction, or analytics disclosures.

3. International data transfers

• International users are now told that continued use constitutes consent to transfer personal information into the United States.
• Risk: Continued-use consent may be insufficient under some privacy regimes, particularly where valid consent must be specific, informed, freely given, and withdrawable. The provision also does not identify safeguards, transfer mechanisms, data-subject rights, or complaint procedures.

4. Policy changes and incorporation

• The provider may amend the policy at its sole discretion and without prior notice. Use of information is governed by the policy in effect when used, and the policy is incorporated into the Terms of Service.
• Risk: This permits material changes—including potentially broader data use—without direct notification or renewed consent.

5. Customer intellectual property

• A new statement says Proposify holds no claim or rights to intellectual property used and stored by customers.
• This is helpful, but it does not expressly grant the provider the limited license needed to host, process, secure, back up, or technically deliver the services, nor does it resolve ownership of derived data, analytics, or AI outputs.

Executive Summary

The revised Privacy Policy materially broadens the circumstances in which customer information may be shared, adds new service-provider categories, changes access and amendment provisions, and adds fraud, safety, legal-process, and business-transfer disclosures. The diff does not expressly mention artificial intelligence, machine learning, model training, prompts, inputs, outputs, or use of customer data to train AI models.

Key Changes and Risks

1. Expanded sharing with vendors and contractors

The policy newly permits sharing personal information with:

• Integration partners, when the customer requests a data export;
• Developers, support administrators, designers, data analysts, and network technicians;
• Vendors that manage or store data uploaded to Proposify;
• Vendors that support or improve the Services;
• Legal, financial, and other professional advisers.

Risk: The vendor language is broad and does not identify specific vendors, geographic locations, retention periods, security requirements, or contractual limits on secondary use. Although payment processors are stated to be prohibited from using personally identifiable information for promotional purposes, equivalent restrictions are not clearly stated for all other vendors.

2. Possible marketing use

The revised language permits sharing aggregate anonymous information for Website and Service improvement or marketing. It also preserves or clarifies California-related disclosures concerning sharing personal information with third parties for their own direct marketing purposes.

Risk: “Aggregate anonymous” information may still create re-identification concerns if aggregation or anonymization standards are not defined. The policy should distinguish clearly between anonymous, de-identified, pseudonymous, and personal information.

3. New legal, fraud, and safety disclosures

Personal information may be shared where Proposify believes disclosure is required or necessary to:

• Comply with judicial or legal process;
• Protect Proposify’s rights;
• Investigate or prevent illegal activity or suspected fraud;
• Address threats to physical safety; or
• Comply with other legal obligations.

Risk: Some triggers rely on Proposify’s subjective belief, potentially allowing disclosure without a court order or customer consent.

4. Business transfers

The policy adds permission to transfer personal information to a third party if the Website is assigned, with notice by email or another stated method.

Risk: Customer data may be transferred during a sale, merger, or restructuring. The policy does not explain whether the recipient must honor the existing privacy commitments or whether customers can object or delete their data.

5. Access and correction rights

The revised policy provides that customers may review, update, delete, or correct information in their account, and may email support if they cannot access it.

Positive change: This is more specific and potentially more helpful than the former general access language.

6. Policy changes

The policy changes from permitting amendments at the company’s discretion to stating that Proposify will “never initiate a request for personal information” and may amend the policy at any time without prior notice. This wording appears internally inconsistent or technically defective.

Risk: Customers may receive little or no advance notice of material privacy changes and may be expected to monitor the policy themselves.

7. AI-model training

No express authorization or prohibition regarding use of customer data to train AI models appears in the supplied diff. The new references to using data to “support and improve the Services” are broad enough to warrant clarification, but they do not expressly state that customer data may be used for AI training.

8. Drafting issues

The policy states both “Last updated on May 27, 2025” and that it was modified on May 25, 2025. The repeated and fragmented diff also suggests the final policy should be reviewed for grammatical and sequencing errors before publication.

Summary of the Change

• The diff states that approximately 311 words were removed from the document.
• However, the actual deleted text is not provided—only a placeholder indicating its approximate length.

Legal and Commercial Impact

Because the deleted language is unavailable, it is not possible to determine:

• Which rights, obligations, warranties, or limitations were removed.
• Whether liability, indemnity, confidentiality, security, audit, termination, or compliance provisions changed.
• Whether any customer protections or provider rights were eliminated.
• Whether the deletion creates ambiguity or shifts risk to the customer.

A deletion can be legally significant even if no replacement language appears. Removing a restriction, consent requirement, warranty, or security commitment may expand the provider’s discretion or reduce the customer’s remedies.

AI Training and Customer Data

The provided diff does not identify whether customer data may be used to train AI models. In particular, it is impossible to determine whether the deleted text addressed:

• Use of customer data, prompts, outputs, or usage information for model training or improvement.
• Whether training is conducted by the provider or third-party AI vendors.
• Customer consent, opt-out, or default enrollment.
• De-identification, aggregation, or anonymization requirements.
• Ownership or licensing rights in customer data, inputs, and outputs.
• Retention and deletion of data used for training.
• Restrictions on using confidential, personal, regulated, or sensitive information.
• Notice or approval requirements for changes to AI-data practices.

Risk Assessment

The deletion should be treated as unresolved and potentially material, particularly if the removed provisions previously limited use of customer data or prohibited AI training. The available information does not support a conclusion that AI-training rights were added, removed, or narrowed.

Recommended Next Step

Obtain the full redline or the approximately 311 deleted words, together with the surrounding provisions. Review specifically for terms such as “train,” “improve,” “machine learning,” “AI,” “models,” “inputs,” “prompts,” “outputs,” “customer data,” “de-identified,” “aggregated,” “service improvement,” and “third-party providers.”

Key Changes and Risks

1. Expanded disclosure of customer information

The revised policy substantially broadens the circumstances in which Proposify may share personal information:

• Third-party contractors may access information to maintain and improve the Services, including developers, support administrators, designers, data analysts, and network technicians.
• Third-party vendors may manage and store data uploaded to Proposify and support or improve the Services.
• Information may be shared with integration partners at the customer’s request.
• Information may be shared with legal, financial, and other professional advisers.
• Personal information may be transferred to a third party following an assignment or change in ownership/control of the Website, with notice by email.
• Disclosure is permitted where Proposify believes it is necessary to investigate or prevent illegal activity, suspected fraud, threats to physical safety, or as otherwise required by law.

Risk: Customer data may be accessible to a wider range of vendors and personnel. The policy does not specify vendor identities, retention limits, security standards, geographic locations, or whether vendors may use data for their own purposes.

2. Customer data and AI-model training

The diff contains no express authorization to use customer data to train, fine-tune, or improve AI models, and no express prohibition on such use.

However, the new permission to share uploaded data with vendors “to support and improve the Services” is broad. If Proposify or its vendors use AI systems to improve the Services, this language could create ambiguity about whether customer content may be processed for model development or training.

Risk: Customers do not receive a clear commitment that uploaded content, personal information, or derived information will be excluded from AI training. A separate contractual or policy statement should clarify:

• whether customer data may be used for AI training;
• whether data is anonymized or aggregated first;
• whether third-party AI providers may retain or reuse prompts, outputs, or content;
• whether customers can opt out; and
• whether confidential data is segregated from model-training datasets.

3. Access and correction rights revised

The policy now expressly states that customers may review, update, delete, or correct personal information and provides a support email process if account access is unavailable.

This is clearer operationally, but the policy no longer appears to promise the former “all reasonable steps” language in the same context as broadly as before. It also does not state response deadlines, verification requirements, or limits on deletion.

4. California privacy disclosures

The California section is reorganized and more specifically describes the right to request:

• categories of personal information shared; and
• the categories and names of businesses receiving it for direct marketing.

This may improve transparency, but the revised wording should be checked against current California privacy-law requirements and the company’s actual sharing practices.

5. Policy-change rights

Proposify now states it may amend the Privacy Policy at any time, at its sole discretion, without prior notice, and that the policy in effect at the time of use governs.

Risk: Material privacy changes—including future AI-data practices—could take effect without advance notice or consent.

6. Drafting and date issues

The heading says “Last updated on May 27, 2025,” while the closing statement says the policy was modified on May 25, 2025. This inconsistency should be corrected.

Summary of Important Changes

AI Model Training

• No express change addresses AI, machine learning, or model training.
• The revised policy does not expressly authorize Proposify or its vendors to use customer content or personal information to train, fine-tune, evaluate, or improve AI models.
• It also does not expressly prohibit such use. The broader references to “use of information,” service improvement, data handling, and third-party disclosures could leave uncertainty about whether customer data might be used for AI-related purposes.
• Customers should seek clarification on whether uploaded documents, proposals, prompts, usage data, or personal information are:
• used to train Proposify’s or third parties’ AI models;
• shared with AI providers;
• retained after account deletion; or
• excluded from model training through contractual or technical controls.

Information Sharing

• The prior policy expressly permitted sharing with payment processors, integration partners, contractors, data-storage vendors, and others supporting or improving the Services.
• The revised language states: “Except as provided above, we will not share any of your information to any third party without permission.”
• This appears more restrictive, but “provided above” is unclear and may preserve exceptions elsewhere in the policy or related terms.
• Specific descriptions of contractors and vendors have largely been removed, reducing transparency about categories of recipients and their permitted uses.
• California-specific language now acknowledges sharing customer information with third parties for their own direct marketing purposes and provides a request procedure for disclosure of recipient categories and business names.

Customer Access and Control

• The policy now states that users can review, update, delete, or correct personal information in their account.
• The prior commitment to take reasonable steps to provide access if a user could not access the account has been replaced with a less direct instruction to contact Proposify. The practical process and response obligations are less clear.

International Transfers

• International users are told that continued use constitutes consent to transfer personal information to the United States.
• The policy emphasizes that U.S. law governs and that the policy is incorporated into the Terms of Service.
• This may be inadequate or problematic for jurisdictions requiring specific transfer mechanisms, lawful bases, or more detailed disclosures.

Policy Changes

• Proposify may amend the policy at its sole discretion and without prior notice.
• Users are instructed to check the policy periodically. This creates a risk that material changes—including future AI-data practices—could take effect without direct notification or affirmative consent.

Other Changes

• New language says Proposify claims no rights in customer intellectual property used or stored by customers.
• The policy adds fraud-reporting, children’s privacy, contact, and California privacy provisions.
• The effective-date language states the policy was last modified May 25, 2025, despite the prior heading referring to May 27, 2025; this inconsistency should be corrected.

Summary

The diff only states that approximately 311 words were removed; it does not identify which provisions were deleted or provide replacement language.

Key legal impacts

• Substantive analysis is not possible: Without the deleted text, it is impossible to determine whether the changes affect liability, confidentiality, intellectual property, data protection, termination, warranties, or other obligations.
• Potential risk from deleted protections: Removing language may eliminate customer rights, provider obligations, limitations on data use, security commitments, audit rights, or remedies. The significance depends entirely on the missing provisions.
• No identifiable AI-training change: The provided diff does not show whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models. It is therefore not possible to conclude whether:
• customer data may now be used for model training;
• training requires consent or opt-in;
• de-identification or aggregation is required;
• customer data may be shared with affiliates or third-party model providers; or
• training-use restrictions or deletion obligations were removed.

Recommended next step

Provide the actual redline or the text of the approximately 311 deleted words, together with any surrounding provisions. Particular attention should be given to terms such as “customer data,” “content,” “inputs,” “outputs,” “service improvement,” “machine learning,” “artificial intelligence,” “train,” “fine-tune,” “de-identify,” and “aggregated data.”

The publisher records this document as revised on this date (“updated on May 27, 2025”).

Summary

Information Provided

The diff only states:

> “Added approximately 311 words to the document”

No actual contract language or marked-up additions were included.

Legal and AI-Training Analysis

Because the text of the additions is unavailable, it is not possible to determine:

• What contractual rights or obligations changed.
• Whether liability, indemnity, confidentiality, security, or termination provisions were modified.
• Whether customer data may be used to train, fine-tune, evaluate, or improve AI models.
• Whether such use is limited to de-identified, aggregated, or anonymized data.
• Whether customer consent is required for AI training.
• Whether the provider may share data with affiliates, subprocessors, or third-party model providers.
• Whether the customer can opt out of AI training or request deletion of training-related data.
• Whether ownership of inputs, outputs, or derived data has changed.
• Whether the provider makes commitments concerning model confidentiality, data retention, or regulatory compliance.

Risk Assessment

No specific new legal risks can be identified from the information provided. The statement that approximately 311 words were added does not reveal the substance, scope, or effect of those additions.

Information Needed

Please provide the actual redline or the full text of the 311 added words, using the stated notation:

• {added text}
• [deleted text]
• [old text]{new text}

Once provided, the additions can be analyzed for customer-data use, AI-model training rights, consent and opt-out mechanisms, ownership, confidentiality, retention, third-party disclosures, and other material risks.

Privacy Policy Diff Summary

Executive Summary

The diff appears to replace much of the prior privacy policy with a substantially different, shorter policy. The markup is highly repetitive and appears technically malformed in places, so the final published text should be reviewed carefully for unintended omissions or duplicated language.

Important Changes and Risks

1. Customer-data sharing is described differently

The prior policy expressly allowed sharing with:

• Credit-card processors, subject to restrictions on use;
• Third-party integration partners;
• Contractors such as developers, support personnel, designers, analysts, and network technicians;
• Vendors that manage and store data uploaded to Proposify;
• Third parties receiving aggregate anonymous information to improve the website and services;
• Legal, financial, and professional advisers.

The replacement generally states that Proposify will not share information with third parties without permission, except as otherwise provided. However, the new language does not clearly identify all service providers, processors, integrations, advisers, or other operational recipients. This may create ambiguity about how customer data is handled and whether previously stated safeguards still apply.

2. No express AI-training authorization appears

The diff contains no express provision authorizing Proposify to use customer data, uploaded content, personal information, or de-identified information to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.

The prior reference to sharing “aggregate anonymous information” to improve the services is removed. That deletion may reduce an expressly stated analytics/improvement permission, but it does not clearly prohibit AI training. The revised policy should therefore be checked alongside the Terms of Service, product terms, and any AI-specific terms, where such rights may appear instead.

3. Customer access rights are narrowed or made less clear

The prior policy allowed users to review, update, delete, or correct personal information and included a process for inaccessible accounts. The replacement primarily discusses contacting Proposify for information about access and use. It may no longer clearly promise correction or deletion rights or specify response procedures.

4. California disclosure language is added

California users receive a new “Shine the Light” disclosure process concerning categories of information shared for third-party direct marketing and the identities of recipient businesses. This is a new transparency right, but it is limited to sharing covered by that law and does not necessarily provide a broader opt-out.

5. International transfers and consent

International users are told that continued use constitutes consent to transfer personal information to the United States. This is a broad transfer statement and may be insufficient by itself for jurisdictions requiring specific transfer mechanisms, disclosures, or consent standards.

6. Unilateral policy changes

The revised policy says Proposify may amend the policy at its sole discretion and without prior notice, requiring users to check back periodically. This increases customer risk because material privacy changes may take effect without direct notification.

7. Customer intellectual property

A new statement says Proposify claims no rights in intellectual property used and stored by customers. This is favorable in principle, but it does not explain operational licenses needed to host, process, secure, or provide the services. Those rights should be confirmed in the Terms of Service.

Key Changes and Risks

1. AI-powered features and customer data

The revised terms add or clarify provisions concerning AI-powered features:

• Customers remain the sole owners of their inputs submitted to AI features.
• The terms direct users to the Privacy Policy for further information about data handling and processing.
• The excerpt does not expressly state whether customer inputs, outputs, or other Service data may be used to train Proposify’s or a third party’s AI models.
• It also does not clearly state:
• whether customer data is used for model training, fine-tuning, evaluation, or product improvement;
• whether training is opt-in or opt-out;
• whether data is anonymized or de-identified before use;
• whether third-party AI providers receive the data;
• how long AI inputs and outputs are retained; or
• whether confidential information should be excluded from AI features.

Risk: Ownership of inputs does not necessarily prevent Proposify or its vendors from using those inputs for operational or model-development purposes. Customers should review the referenced Privacy Policy and Data Processing Addendum, especially any provisions on service improvement, automated processing, subprocessors, retention, and aggregated or de-identified data. If AI training is not addressed there, the contractual position remains unclear.

2. New update date

The title now states: “Terms of Service — Last updated on October 15, 2025.”

This helps identify the applicable version but does not itself change substantive rights. Customers should preserve a copy of the prior terms for comparison and recordkeeping.

3. Mandatory arbitration and class-action waiver

The document now includes a heading referring to:

• Mandatory arbitration;
• Exceptions;
• Waiver of class-action rights; and
• A limitations period.

The excerpt does not include the operative language, so the full impact cannot be determined. If new, this could materially restrict the customer’s ability to sue in court, participate in a class action, or bring claims after the stated deadline. The complete section should be reviewed carefully, including governing law, arbitration location and rules, available remedies, opt-out rights, and exceptions.

4. Contact information

An email address—support@proposify.com—is added alongside the postal address. This may provide a more practical method for notices or support, but the terms should clarify whether email is legally effective for formal notices.

5. Apparent formatting and drafting changes

Numerous changes remove spaces around headings and sentences, for example “AvailabilityWe're,” “AccountTo,” and “PrivacyProposify.” These appear primarily editorial, but they reduce readability and could create ambiguity about section boundaries. The final published version should be checked to ensure no headings or operative provisions have been accidentally merged or omitted.