Privacy Policy

Information we collect

Account and profile information. When you sign up or accept an invitation, we collect your name, email address, organization, role and sign-in details. Authentication is handled by our identity provider, Clerk, which processes your login credentials, sign-in method and session information on our behalf.

Project content. Information you and other participants add to projects, including property and loan details, budgets, draw requests, invoices, lien waivers, change orders, contracts, inspection requests, reports, comments and electronic signatures. These materials may contain information about people, such as contractor, vendor and signer names and contact details.

Photos and file metadata. Photos and files you upload can carry metadata, such as the date and time a photo was taken, GPS location, and device information. We read and keep this metadata because it is part of how the Service verifies that work was inspected where and when it is said to have been. Location and time data embedded in photos is visible to participants on the project.

Billing information. If you subscribe, payment details are collected and processed by our payment processor, Stripe. We receive limited billing information, such as the billing contact, plan and payment status, but not full card numbers.

Usage and device data. When you use the Service we automatically collect log and usage information, such as IP address, browser and device type, pages and features used, timestamps, and error and diagnostic data. We use cookies and similar technologies that are needed to keep you signed in, remember preferences such as theme, run the guided demo, and keep the Service secure.

Communications. If you request a quote, contact us or receive our emails, we keep the information you provide and records of those communications, such as email delivery status.

How we use information

• to provide and operate the Service, including sharing project content with the participants invited to a project;
• to authenticate users, manage roles and permissions, and process e-signatures;
• to read and organize uploaded documents, including with AI-assisted extraction, and to compare budgets, invoices and inspection findings;
• to send notifications, invitations, inspection requests and service messages;
• to bill for the Service;
• to secure the Service, prevent fraud and abuse, and debug and fix problems;
• to analyze and improve the Service and develop new features; and
• to comply with law and enforce our agreements.

Aggregated Data and AI

We use the information you provide and data generated by your use of Proven to create aggregated or de-identified data and to develop and improve analytics, benchmarks and AI models. Aggregated Data does not identify you, any individual or a specific property, project or account, and we may use and share it for any lawful purpose, including in data products offered to third parties. We do not sell personal information.

How we share information

• Project participants. Content you add to a project is shared with the lender, borrower or operator, inspectors and other users invited to that project, according to their role.
• Service providers. We use vendors to run the Service on our behalf, under confidentiality and data-protection obligations, including for hosting and application delivery (Vercel), database and file storage (Convex), authentication (Clerk), payments (Stripe), email delivery (Resend), error monitoring (Sentry), and AI document processing (Anthropic). These providers may process information only to provide their services to us.
• Legal and safety. We may disclose information if required by law, subpoena or other legal process, or to protect the rights, property or safety of Proven Spec, LLC, our users or others.
• Business transfers. Information may be transferred as part of a merger, acquisition, financing or sale of assets, subject to this Policy.
• With your direction. We share information when you ask us to, for example by exporting a report or sending a share link.

We do not sell personal information and do not share it for cross-context behavioral advertising.

Retention

We keep account information for as long as your account is active. Project content is kept for the life of the project and the customer’s account so that draw, lien-waiver and inspection records remain available for audit, and for a reasonable period afterwards unless the account administrator asks us to delete it sooner. After an account closes we delete or de-identify Customer Data within a reasonable period, except where we must keep it to meet legal, accounting or security obligations or to resolve disputes. Backups are overwritten on a rolling schedule. Aggregated Data is not deleted when an account closes.

Security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit, access controls based on project membership and role, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your login credentials confidential and tell us right away at contact@provenspec.io if you believe your account has been compromised.

Your rights and choices

You can view and update your profile information in the Service. Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to object to or restrict certain processing. To make a request, email contact@provenspec.io. We will verify your request and respond as required by law. Where your information is part of project content controlled by a lender or other customer, we may refer your request to that customer and act on its instructions. You can opt out of non-essential emails using the link in those emails; we will still send service messages related to your account.

Children

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

International users

We are based in the United States and process information in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, for material changes, notify account administrators by email or in the Service.

Contact us

Questions or requests about this Privacy Policy can be sent to:

Proven Spec, LLC
30 E Broadway, Suite 203 #1053
Salt Lake City, UT 84111
contact@provenspec.io