Privacy policy

Last updated November 1, 2026

This policy explains how Props.to ("we") handles information when you use props.to, app.props.to and auth.props.to (the "Service"). In short: we collect what's needed to sign you in and deliver feedback. We don't sell your data, show ads, or use your feedback to train AI models.

What we collect

Account details: your name, email address, profile picture and, if you sign up with email, a hashed password.
Organization details: the company you belong to, your groups, role and level, and who leads which group, as set by your organization's admins.
Feedback and conversations: feedback you give or receive, the values it is tagged with, and conversation notes.
Anonymous feedback: when you send feedback anonymously, your identity is hidden from the recipient.
Technical data: IP address, browser type and request logs, used for security, rate limiting and fixing errors.
Cookies: only those needed to keep you signed in across props.to. We don't use advertising cookies.

Google user data

If you sign in with Google, we request these permissions:

openid, email and profile: your Google account ID, name, email address, profile picture and Workspace domain. We use them to create your account, sign you in and connect you to your company.
admin.directory.user.readonly: your own user record in your company's Google Workspace directory. We read it only to check whether you are a Workspace admin, so only admins can set up your company on props.to. We store only that yes or no, and we don't read anyone else's record.

We don't access your email, files or calendar. props.to's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, don't sell it, don't use it to train AI or machine learning models, and no person reads it except with your consent, for security, or to comply with the law.

How we use it

To run the Service: sign-in, delivering feedback, moderation, conversations and notifications.
To send the emails the Service needs, such as sign-in links and new feedback notices.
To keep the Service secure, prevent abuse and fix errors.

Who we share it with

Inside your organization, feedback is visible to the person it is about. Admins see feedback waiting for moderation. Conversations about a member, including internal notes, are visible to the organization's owners and admins and to the leads of that member's groups. The member can read the shared parts of those conversations, but not the internal notes.

These providers process data on our behalf: Vercel (hosting), Neon (database), Resend (email) and Google (sign-in). We may disclose information if the law requires it, or to protect people or the Service.

Storage and retention

Data is stored in the United States (AWS us-east-2, Ohio) and encrypted in transit. We keep your account and feedback while your account is active. When you leave an organization, your personal feedback stays in your account and the organization keeps the feedback shared with it. When you delete your account, we delete your personal data within 30 days, except where the law requires us to keep it.

Your choices

Access, correct, export or delete your data by emailing hello@props.to.
Remove props.to's access to your Google account at any time in your Google account permissions.
Depending on where you live, you may have more rights under laws like the GDPR. We answer requests within 30 days.

The Service is not meant for children under 16.

We post changes to this policy here and email you before significant changes take effect.

Contact

Email us at hello@props.to.