Privacy notice

What ProveIt collects

• Ideas and conversations: the product idea, answers, and chat messages you submit are sent to Anthropic to generate the validation and research response. Full Validation may use Anthropic's web-search capability.
• Contact and intent details: if you use the waitlist or pricing-intent form, ProveIt receives your email address, optional note or idea excerpt, selected pricing option, intended use, and the IP address associated with the request.
• Orders: if you use the paid-bundle flow, ProveIt stores an order record, idea summary, submitted transcript, payment status, and the email Stripe provides after checkout. Stripe handles card details; ProveIt does not receive or store your full payment-card number.
• Technical information: IP addresses are used for rate limiting, abuse prevention, and spend controls. The browser also uses essential local storage for the resumable ProveIt session.
• Optional analytics: PostHog is off by default. If you allow analytics, it may receive page and feature events, browser/device information, and error metadata. ProveIt does not intentionally send your idea or chat text to client-side PostHog analytics.

Why and where information is used

Information is used to provide the validation service, return results, fulfil paid orders, respond to requests, prevent abuse, protect the service from unexpected spend, and improve reliability where analytics has been enabled.

ProveIt uses third-party providers to run these functions: Anthropic for AI processing and research, Supabase for selected application records, Resend for notification and fulfilment email, Stripe for payment checkout, PostHog for optional analytics, and hosting/infrastructure providers to serve the application. These providers process information under their own terms and privacy notices.

Analytics choices

PostHog analytics and its cookies/local storage do not start until you choose “Allow analytics”. You can change your choice here at any time. Essential session storage remains available because it is needed for the product to work.

Retention and deletion

Submitted contact, intent, and order records are kept only while they are needed to respond, provide the service, fulfil an order, maintain operational records, or resolve disputes. Some deletion work is handled manually because this is a small project and it does not yet have an automated retention schedule for every provider. Provider logs and backups may persist for longer under the provider's own policies.

To ask for access, correction, or deletion, email cla1re@me.com. Please include enough detail to identify the submission, but do not send passwords or payment-card details.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, to withdraw analytics consent, and to complain to your local data-protection authority. Contact me first and I will respond as soon as reasonably practical.

Security and sensitive information

ProveIt uses HTTPS, server-side environment variables for credentials, database access controls, rate limiting, and signed payment webhooks. No online service is completely secure. Do not submit health, financial, employment, client-confidential, or other sensitive information unless you are comfortable with it being processed by the providers described above.

Children and changes

ProveIt is not directed at children and I do not knowingly collect information from children. This notice may change as the service changes; the “last updated” date above will change with material updates.