Privacy Policy · Palmar

This Privacy Policy describes how Palmar collects, uses, and protects information when you use the Palmar service. We process personal data in accordance with applicable data protection laws.

1. What we collect

Account information. Name, email, phone number, and company name — used to operate your workspace and produce invoices.
Content. Tender documents, RFP uploads, proposal drafts, and chat history within the AI Studio. Used solely to provide the service to you and your workspace members.
Usage data. AI token consumption, feature usage, and error telemetry — used to operate quotas, debug issues, and improve the service.
Payment data. Card brand and last four digits only; full card numbers are processed by a PCI-DSS compliant payment processor and never stored on Palmar systems.

2. How we use it

To deliver the platform, run your subscription and renewals, generate invoices, send transactional notifications (email where you opt in), and improve the service. We do not sell personal data.

3. Sharing

We share data only with sub-processors required to run the service (our payment processor for charges, our hosting provider, and our database provider). Authorities receive data only when compelled by applicable law.

4. Retention

Workspace data is retained for the lifetime of the workspace and for up to 90 days after deletion to allow recovery, after which it is permanently erased except where a longer retention period is required by applicable law (e.g. invoice records).

5. Your rights

You may request access, correction, or deletion of your personal data by contacting privacy@palmar.ai. We respond within 30 days as required by applicable data protection laws.

6. Contact

Privacy questions can be sent to privacy@palmar.ai.