Privacy Policy

1. Overview

ProvenMaker ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. You may optionally provide additional profile information such as your craft type, bio, social media links, and Etsy shop URL.

Verification Evidence

When you submit a verification, you upload files such as workshop photos, process documentation, and supply receipts. These files are stored securely and are used solely for the verification process and proof package generation.

Usage Data

We automatically collect basic usage data including your IP address, browser type, pages visited, and timestamps. This data helps us maintain and improve the Service.

Payment Information

If you subscribe to a paid plan, payment processing is handled by our third-party payment processor (Stripe). We do not store your credit card number or full payment details on our servers.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process verification submissions and generate proof packages
• Display your public maker profile and verification badge (if you opt in)
• Send transactional emails (account confirmation, password resets, verification updates)
• Respond to support requests
• Detect and prevent fraud or abuse of the verification system
• Measure advertising performance and build advertising audiences when you consent

We do not sell your personal information. We do not use your uploaded evidence for any purpose other than providing the Service.

4. How We Share Your Information

We share your information only in these limited circumstances:

• Public profiles and badges: If you choose to make your maker profile or proof package public, the information in those pages is visible to anyone with the link.
• Service providers: We use third-party services to operate the platform, including Supabase (authentication and database), Cloudflare (file storage), Vercel (hosting), Resend (email delivery), and Meta (consent-based advertising measurement and audience creation). These providers process data under their applicable terms and privacy policies.
• Legal requirements: We may disclose information if required by law, legal process, or government request.

5. Data Storage & Security

Your account data is stored in Supabase (hosted in the United States). Uploaded files are stored in Cloudflare R2 object storage. Proof packages include cryptographic signatures (SHA-256 hashes) to ensure tamper evidence.

We use industry-standard security measures including encrypted connections (TLS), row-level security policies on our database, and secure credential management. However, no system is perfectly secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data and uploaded evidence for as long as your account is active. If you close your account, we will delete your personal data and uploaded files within 30 days, except where we are required to retain records for legal or compliance purposes.

Proof packages that have been shared publicly may be cached by third parties (search engines, browsers) beyond our control.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your profile
• Delete your account and associated data
• Export your data, including your uploaded evidence and proof packages
• Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at support@provenmaker.com.

8. Cookies

We use essential cookies and similar storage for authentication, security, session management, and remembering your privacy choice. These are required to operate the Service.

If you choose "Allow advertising cookies," we load the Meta Pixel. Meta may receive information such as the pages you visit, browser and device information, IP address, referring page, and selected product events such as viewing a scan result, requesting a report, beginning checkout, or activating a subscription. We use this to measure advertising performance and create retargeting and similar audiences. We do not intentionally send your uploaded evidence, email address, Etsy shop name, or match URLs to Meta.

Advertising tracking is off unless you affirmatively allow it. You may decline without losing access to ProvenMaker and may change or withdraw your choice at any time. Meta handles information it receives according to its own privacy policy.

Privacy choices

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions or concerns about your privacy? Reach us at support@provenmaker.com.