Legal
Privacy Policy
Last updated October 31, 2026
DataProof is the controller of the personal data described here. That means we decide how and why it is used.
What we collect and why
- Account details (email address, name if provided by Google sign-in, login credentials): to create and secure your account. Basis: contract.
- Searches and evaluations (vendor names, criteria, reports, scores): to provide the service and show your scorecards. Basis: contract.
- Vendor samples you submit (descriptions, excerpts, file summaries): to screen them and include them in the evaluation. Original files are stored only if you tick the storage box, and are deleted after the period you choose (7, 30 or 90 days) or when you delete them. Basis: contract and, for stored files, consent.
- Email for report delivery: to send you a detailed report when it is ready. Basis: contract.
- Plan and usage records (plan, evaluations used): to apply your allowance. Basis: contract.
- Technical data (IP address, device and browser details, error logs): for security, fraud prevention and fixing problems. Basis: legitimate interests.
- Support messages: to answer you. Basis: legitimate interests.
Who we share it with
- Service providers who host and run DataProof, including cloud hosting, database and storage, email delivery, and AI model providers used to write reports and screen samples.
- Reppo, which receives the evidence report (including the sample screening) when an evaluation goes to its prediction-market review.
- Paddle, our Merchant of Record, for selling the product, managing subscriptions, payments, tax compliance and invoicing.
- Professional advisers such as lawyers and accountants.
- Authorities, where the law requires it.
We do not sell your personal data.
How long we keep it
We keep account data while your account is open. Stored sample files are kept only for the period you choose. Other records are kept as long as needed to provide the service and meet legal obligations, then deleted or anonymised.
International transfers
Our providers may process data outside your country. Where required, we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.
Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or move your data, object to processing, or withdraw consent at any time. You can also complain to your local data-protection authority. Email support@dataproof.dev and we will respond within one month.
Security
We use encryption in transit, access controls that limit each account to its own data, private storage for sample files, and automatic expiry of stored files.
Cookies
We use only essential cookies and local storage needed to keep you signed in and run checkout. We do not use advertising cookies.
Contact
DataProof · support@dataproof.dev