Privacy Policy

This policy applies to Proofly’s website and services for connecting businesses, customer references, and sales prospects. “Proofly,” “we,” and “us” refer to the operator of these services.

Businesses may provide information about their customers and prospects. Those businesses are responsible for having the right to share that information and for their own privacy notices. Where we process information on a business’s behalf, that business’s instructions and applicable agreements also apply.

• Account and workspace information: name, email address, company name, account identifiers, authentication information, team membership, and preferences.
• Reference and prospect information: contact details supplied by you or an inviting business, business relationships, request details, scheduling information, meeting links, and participation history.
• Communications and proof: in-app messages, uploaded screenshots or other completion evidence, and invitation or notification delivery records. Do not upload information unrelated to a request or confidential information you are not authorized to share.
• Consent records: communication preferences and, when SMS consent is collected, the phone number, consent text, timestamp, and IP address associated with that consent.
• Payment records: offered payouts, fees, bonuses, payment status, funding preferences, and payment-provider identifiers. When enabled, bank or debit-card onboarding is handled by Stripe; payment details submitted directly to Stripe are subject to Stripe’s privacy policy.
• Technical information: information needed to operate and secure the service, such as IP address, browser/device information, session records, error logs, and activity associated with your account.

We use information to create accounts, operate workspaces, deliver invitations and requests, enable reference conversations, verify completion evidence, calculate payouts, maintain records, provide support, and protect the service against abuse.

We also use it to honor communication preferences and legal obligations. Where applicable law requires a legal basis, we rely on performance of our agreements, consent for optional connections and communications, legitimate interests in operating and securing the service, or legal obligations, as appropriate.

Signing in with Google and connecting a Gmail inbox are separate actions. Google sign-in provides basic identity information, such as your name and email address. Saving a reply-to email address does not grant Proofly access to your inbox.

If you choose to connect Gmail when that feature is available, Google presents the requested permissions before you authorize access. Proofly accesses only the data covered by those permissions to provide the email features you choose, such as identifying relevant business receipts or enabling requested email workflows. We do not use Gmail data for advertising, sell it, or use it to train generalized artificial intelligence or machine-learning models.

Proofly’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Access to Google user data by people is restricted to cases permitted by that policy, such as your affirmative consent for support, security investigations, legal requirements, or permitted aggregated internal operations.

You can revoke access through your Google Account connections. Revocation stops future access; deletion of information already stored can be requested as described below. Only connect an account you are authorized to use.

Participating businesses, references, and authorized team members receive the information needed for their requests, conversations, proof review, and payout administration. Participation is not anonymous: relevant profile and request information is visible to the parties involved.

We share necessary information with service providers that operate hosting, authentication, storage, email delivery, and, when enabled, SMS and payments. These include Lovable Cloud, Google for authorized connections, Twilio for enabled SMS delivery, and Stripe for enabled payments. Providers process information under their applicable agreements and privacy policies.

We may disclose information when required by law, to protect users and the service, or in connection with a merger, acquisition, or transfer of the business, subject to applicable safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

Service emails may include invitations, request notifications, and account-related messages. Businesses must have an appropriate basis for contacting invitees. Optional promotional messages require any consent required by law and must provide an appropriate opt-out.

SMS reference requests require explicit opt-in. Consent is not a condition of purchasing goods or services. Where SMS is enabled, message frequency varies and message/data rates may apply. You may withdraw SMS consent in your account or reply STOP where supported; HELP may be used for assistance where supported. Withdrawing SMS consent does not cancel an accepted request or delete your account.

Proofly uses cookies or browser storage as needed for authentication, session security, and account preferences. Installing the customer reference app does not create an offline copy of your account or payout screens. You can manage browser storage in your browser settings, but clearing or blocking it may sign you out or prevent features from working.

We retain personal information for as long as reasonably necessary to provide the service, maintain transaction and consent records, resolve disputes, prevent fraud, and comply with applicable legal obligations. Retention depends on the type of information and the reason it is held. Deleted information may remain temporarily in backups or be retained where legally required.

We use access controls and other safeguards designed to protect account information and restrict access to uploaded proof. No internet service is completely secure; keep your account credentials private and avoid uploading sensitive information that is unnecessary for the reference request.

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your personal information, object to or restrict certain processing, and withdraw consent. You may also have the right to complain to your local data protection authority. We may verify your identity before fulfilling a request.

For information controlled by an inviting business, contact that business directly. For information controlled by Proofly, submit your request through your existing Proofly contact or account support channel, where available. You can change available account preferences within the service and revoke Google access directly through Google.

Our service providers may process information outside your country. Where required, we use appropriate contractual or other safeguards for international transfers.

Proofly is intended for adults participating in business reference activities, not children under 18. If you believe a child has provided personal information, notify Proofly through your existing contact so we can investigate and take appropriate action.

We may update this policy as the service or legal requirements change. We will update the date above and provide additional notice of material changes where required. Please also review our Terms of Service.