Privacy Policy

1. Scope and controller

ProvenOutreach is operated by Proven Labs, LLC. This policy covers provenoutreach.com, its account area, assessment, profile generation, downloads, and related support communications. It does not govern third-party sites you choose to link as source material.

2. Data we collect

• Account data: name, email, authentication events, and account settings.
• Assessment data: your goals, audience, expertise, preferences, personality answers, pasted writing, source URLs, and generated profile.
• Uploaded files: document bytes are processed in memory and are not saved. Extracted text is held only until profile generation ends, then removed from the profile record.
• Transaction data: Stripe customer and checkout identifiers, product, amount, currency, promotion status, and fulfillment state. We do not store full payment-card details.
• Operational data: request timestamps, security events, error details, device and network information made available by standard web requests.
• Support data: messages you send and the information needed to respond.

3. Free builder

The free voice-skill builder runs in your browser. Its answers are not submitted to ProvenOutreach. Downloading or copying the generated file happens on your device. Normal web-server logs may still record that the page was visited.

4. How we use data

We process data to authenticate users, manage preview access, create and deliver requested profiles, prevent abuse, secure and debug the service, provide support, meet legal obligations, and improve product reliability. We do not sell personal data, run behavioral advertising, or use customer assessments or profiles to train general-purpose AI models.

5. AI processing and source material

Assessment answers, writing samples, and selected source text may be sent to an AI model provider to generate your profile. Submitted content is delimited as untrusted source material and is not allowed to control billing, authentication, or system actions. Only submit content you have the right to use. Optional public-source analysis is limited to material you identify or authorize for the subject of the profile.

6. Service providers

We use vendors for hosting, authentication and database storage, payment processing, AI analysis, transactional email, and operational monitoring. Current core providers may include Vercel, Supabase, Stripe, Anthropic, Resend, and AnySite. They process data under their own terms and our service arrangements, only for the functions we use them to perform.

7. Retention

Account and completed-profile data is retained while your account is active so you can access your work. Uploaded file bytes are never saved. Text extracted from uploads is removed when generation ends. Soft-deleted profiles are scheduled for permanent deletion after 30 days. Historical transaction records may be kept longer for accounting, fraud prevention, chargebacks, and legal obligations. Backup copies expire on the provider backup cycle.

8. Security

Controls include encrypted transport, hosted encryption at rest, signed-in access, row-level database policies, server-side ownership checks, verified Stripe webhooks, idempotent fulfillment, bounded requests, rate limits, security headers, and least-privilege secrets. No internet service is risk-free. We will investigate suspected incidents and provide legally required notices.

9. Your choices and rights

You may request access, correction, export, deletion, or restriction of personal data and may object where applicable. Depending on location, you may also have rights to portability, appeal, or complain to a regulator. We verify requests before acting and may retain data that law requires us to keep. We do not discriminate for exercising privacy rights.

10. International processing, children, and changes

Providers may process data in the United States and other countries using lawful transfer mechanisms where required. The service is for adults 18 and older. We do not knowingly collect children's data. Material policy changes will be posted here and, when appropriate, announced to account holders before taking effect.