Privacy Policy
Last updated July 21, 2026
This Privacy Policy explains how Make Me A Proposal, a service operated by Crossover Labs ("Make Me A Proposal", "we", "us", or "our"), collects, uses, discloses, and protects information about you when you visit makemeaproposal.com (the "Site") or use our proposal service (together, the "Service"). It also describes your rights and choices. By using the Service, you acknowledge that you have read and understood this Policy.
If you do not agree with this Policy, please do not use the Service.
1. Who we are and how to contact us
Make Me A Proposal is a product of Crossover Labs. Crossover Labs is the controller responsible for your personal information under this Policy. For any privacy question, request, or complaint, contact us at adam@blrbdigital.com.
2. Information we collect
We collect information in three ways: information you provide, information collected automatically, and information from third parties.
2.1 Information you provide
- Account information. Your name and email address. If you register with a password, it is created and stored by our authentication provider using industry-standard hashing; we never receive or store your password in plain text. If you sign in with Google, we receive your name, email address, and basic profile information from Google.
- Business profile. Your business name, description, website, contact email, and logo, which you may save for reuse.
- Proposal content. The information you enter in the walkthrough or the chat concierge, including details about the client you are pitching, the job or project, your pricing, timelines, and any free-text you provide.
- Saved clients. Companies you save, including company name, contact name, website, and logo.
- Uploaded files. Files you upload, such as logos, drafts, past proposals, or reference documents.
- Communications. Messages you send us about a proposal, support requests, and our responses.
2.2 Information collected automatically
- Device and usage data. Basic technical information such as your browser type, a session identifier, pages viewed, and interactions needed to operate the Service.
- Security and anti-abuse data. To rate-limit requests and prevent abuse, we process a hashed (pseudonymized) form of your IP address and counts of requests. We use these to protect the Service, not to profile you.
- Local and session storage. We store data in your browser to keep you signed in and to save your progress through the walkthrough. See Section 6.
2.3 Information from third parties
- Authentication providers. If you use Google Sign-In, Google shares your basic profile with us as described above.
- Payment processor. Stripe provides us with confirmation of your payments, the amount, and transaction identifiers. We do not receive your full card number.
3. How and why we use your information
We use your information for the purposes below. Where the EU/UK GDPR applies, the legal basis for each purpose is noted.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create, review and deliver your proposals | Account, business profile, proposal content, uploaded files | Performance of a contract |
| Create and manage your account; save your profile and clients | Account, business profile, saved clients | Performance of a contract |
| Process payments and manage subscriptions | Account, payment confirmation data | Performance of a contract |
| Send transactional email and reply to messages | Account, communications | Performance of a contract; legitimate interests |
| Operate the chat concierge (AI-assisted intake) | Chat messages you send | Performance of a contract; legitimate interests |
| Protect the Service against fraud, abuse and technical faults | Security and usage data | Legitimate interests; legal obligation |
| Comply with law, and establish or defend legal claims | As relevant | Legal obligation; legitimate interests |
We do not sell your personal information, we do not serve advertising, and we do not use your proposal content to train publicly available AI models.
4. AI-assisted features
The chat concierge uses a third-party AI provider (Anthropic) to help gather your intake details. When you use the chat, the messages you send are transmitted to the provider's API to generate responses. A person reviews every proposal before delivery. The Service does not make legally significant automated decisions about you without human involvement.
5. How we share information
We share personal information only as described here:
- Service providers (processors) who help us run the Service, under contracts that limit their use of your data to providing services to us:
- Google LLC — Firebase authentication and database, and Google Sign-In.
- Stripe, Inc. — payment processing.
- Anthropic, PBC — the AI provider powering the chat concierge.
- Resend — transactional email delivery.
- Legal and safety. When required by law, legal process, or to protect the rights, safety, or property of Make Me A Proposal, our users, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred, subject to this Policy.
We do not disclose your personal information to third parties for their own marketing purposes.
6. Cookies and local storage
We use strictly necessary browser storage to keep you signed in and to save your walkthrough progress so you can finish later. We do not use third-party advertising or cross-site tracking cookies. Because we rely on essential storage only, we do not display a consent banner; you can clear this data through your browser at any time, though doing so will sign you out and clear saved progress.
7. Data retention
We retain your account, proposals, saved profile, and saved clients for as long as your account is active. You can delete individual drafts, saved clients, and profile items from your account at any time. If you close your account, we delete or de-identify your personal information within a reasonable period, except where we must retain certain records (for example, transaction records for tax and accounting) for the period required by law.
8. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access a copy of the information we hold about you;
- Correct inaccurate or incomplete information;
- Delete your information;
- Port your information to another provider;
- Restrict or object to certain processing, including processing based on legitimate interests;
- Withdraw consent where processing is based on consent.
You can access and update much of your information directly in your account. To exercise any right, email adam@blrbdigital.com. We will respond within the time required by applicable law and may need to verify your identity. You will not be discriminated against for exercising your rights.
8.1 California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion or correction; and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. You may exercise your rights, including through an authorized agent, by contacting adam@blrbdigital.com.
8.2 EU/UK/EEA residents (GDPR)
Where the GDPR applies, we process your information on the legal bases set out in Section 3. You have the right to lodge a complaint with your local data protection authority, although we encourage you to contact us first so we can address your concern.
9. International data transfers
We operate from the United States, and our service providers may process your information in the United States and other countries whose data-protection laws may differ from those in your country. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Contact us for more information about these safeguards.
10. Security
We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption of data in transit, access controls, and provider-level protections. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and to promptly address issues if they arise.
11. Children's privacy
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Third-party links
The Service may link to third-party websites or resources that we do not control. This Policy does not apply to those third parties, and we are not responsible for their practices. Review their privacy policies before providing information.
13. Do Not Track
Because we do not track users across third-party websites, we do not respond differently to browser "Do Not Track" signals.
14. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice through the Service or by email. Your continued use of the Service after an update means you accept the revised Policy.
15. Contact us
Make Me A Proposal, a product of Crossover Labs. For any privacy question or request, email adam@blrbdigital.com.