This Privacy Policy applies to Proofi's website, dashboard, hosted services, and embeddable widgets. Proofi is responsible for the account and service data described below. Customers are responsible for the testimonials and other personal information they choose to publish through their widgets.
1. Information we collect
Account information
When you create an account, we receive information such as your email address, authentication provider, user identifier, and login or security records. If you sign in through Google or another provider, we receive only the account details that provider makes available to us.
Customer Content
We store the content you submit to the service, including project and widget settings, testimonial text, reviewer names, roles, companies, ratings, display dates, avatar images or URLs, and the domains where a widget may be displayed.
Technical and usage information
Our systems may record IP address, browser and device type, requested URL, timestamps, referring page, widget identifier, response status, and diagnostic or security events. In the signed-in dashboard, we also record specific product actions such as creating a widget, changing widget settings, managing testimonials, and copying embed code. These events may include an account identifier and relevant widget or testimonial identifiers, ratings, counts, or the names of settings that changed.
We use PostHog to understand how visitors and account holders use Proofi, diagnose errors, and improve the service.
Communications
If you contact us, we retain your message, contact details, and any information you choose to provide so we can respond and maintain support history.
2. How we use information
We use information to:
- create and secure accounts;
- store testimonials and deliver configured widgets;
- apply product limits and protect service capacity;
- provide support and communicate about the service;
- monitor reliability, debug errors, and prevent fraud or abuse;
- improve features and understand aggregate product usage; and
- comply with law and enforce our Terms of Service.
3. Legal bases
Where data-protection law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests such as securing and improving Proofi, comply with legal obligations, and obtain consent where required. You may withdraw consent at any time without affecting earlier processing.
4. How we share information
We do not sell personal information. We share it only as needed with:
- Supabase, which provides database, authentication, and file-storage infrastructure;
- hosting, security, email, and infrastructure providers that process data under our instructions;
- third-party integrations you choose to connect;
- professional advisers, authorities, or other parties where required to comply with law or protect rights and safety; and
- a buyer or successor in connection with a merger, financing, acquisition, or sale of the service.
5. Public widgets and testimonial data
Testimonials selected for a published widget are public by design. They can be viewed by visitors to the customer's website and may be cached by Proofi or internet infrastructure for performance. Before uploading a testimonial, customers must have an appropriate legal basis and any permissions needed to publish the reviewer's information.
If your information appears in a Proofi widget, contact the website owner first because that customer decides which testimonials to publish. You can also contact us at support@proofi.co, and we will help route a valid request where possible.
6. Cookies and similar technologies
Proofi uses essential cookies or local browser storage to maintain authenticated sessions, protect accounts, and remember necessary preferences. We do not use advertising cookies or sell data for targeted advertising. We will request consent before introducing analytics storage where applicable law requires it.
7. Retention
We retain account and Customer Content while your account is active or as needed to provide the service. Deleted content may remain briefly in caches and backups before automatic removal. We retain security, support, and legal records for as long as reasonably necessary to meet legal, security, or dispute-resolution obligations.
8. International transfers
Our providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or standard contractual clauses.
9. Security
We use reasonable technical and organizational measures designed to protect information, including access controls, encrypted connections, and managed infrastructure. No online service can guarantee absolute security, so you should protect access to the Google account used to sign in to Proofi.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information. You may also have the right to complain to a local data-protection authority. Send requests to support@proofi.co. We may need to verify your identity before completing a request.
11. Children
Proofi is not directed to children under 16, and we do not knowingly collect account information from them. Contact us if you believe a child has provided personal information to the service.
12. Changes to this policy
We may update this policy as Proofi or applicable law changes. We will update the date above and provide reasonable notice if a change materially affects how we handle personal information.
13. Contact
Privacy questions and requests can be sent to support@proofi.co.