Privacy Policy

1. Overview

ProvenMaker ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. You may optionally provide additional profile information such as your craft type, bio, social media links, and Etsy shop URL.

Verification Evidence

When you submit a verification, you upload files such as workshop photos, process documentation, and supply receipts. These files are stored securely and are used solely for the verification process and proof package generation.

Usage Data

We automatically collect basic usage data including your IP address, browser type, pages visited, and timestamps. This data helps us maintain and improve the Service.

Payment Information

If you subscribe to a paid plan, payment processing is handled by our third-party payment processor (Stripe). We do not store your credit card number or full payment details on our servers.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process verification submissions and generate proof packages
• Display your public maker profile and verification badge (if you opt in)
• Send transactional emails (account confirmation, password resets, verification updates)
• Respond to support requests
• Detect and prevent fraud or abuse of the verification system

We do not sell your personal information. We do not use your uploaded evidence for any purpose other than providing the Service.

4. How We Share Your Information

We share your information only in these limited circumstances:

• Public profiles and badges: If you choose to make your maker profile or proof package public, the information in those pages is visible to anyone with the link.
• Service providers: We use third-party services to operate the platform, including Supabase (authentication and database), Cloudflare (file storage), Vercel (hosting), and Resend (email delivery). These providers process data on our behalf and are bound by their own privacy policies.
• Legal requirements: We may disclose information if required by law, legal process, or government request.

5. Data Storage & Security

Your account data is stored in Supabase (hosted in the United States). Uploaded files are stored in Cloudflare R2 object storage. Proof packages include cryptographic signatures (SHA-256 hashes) to ensure tamper evidence.

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, and secure credential management. However, no system is perfectly secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and uploaded evidence for as long as your account is active. If you close your account, we will delete your personal data and uploaded files within 30 days, except where we are required to retain records for legal or compliance purposes.

Proof packages that have been shared publicly may be cached by third parties (search engines, browsers) beyond our control.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your profile
• Delete your account and associated data
• Export your data, including your uploaded evidence and proof packages
• Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at support@provenmaker.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Your browser settings allow you to control cookie behavior, but disabling essential cookies may prevent you from using the Service.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions or concerns about your privacy? Reach us at support@provenmaker.com.