Privacy Policy

PROOF ("we," "us," or "our") operates the PROOF web application (the "Service"), a podcast review analysis platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign in via Google OAuth, we receive your name, email, and profile photo URL from Google. We do not receive or store your Google password.

Usage Data

We automatically collect information about how you interact with the Service, including podcasts searched and analyzed, pages visited, features used, timestamps, and browser type. IP addresses are converted to a keyed one-way hash at the moment of collection; the raw IP address is not stored in our records.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We receive a transaction ID, purchase amount, and confirmation status from Stripe. Please refer to Stripe's Privacy Policy for details on how they handle payment data.

Podcast Review Data

We collect publicly available podcast review data from the Apple Podcasts platform, including review text, ratings, usernames, dates, and country of origin. This data is publicly available and is not considered personal information of our users. We analyze this data to generate pattern scores and insights.

2. How We Use Your Information

• To provide, operate, and maintain the Service
• To process transactions and deliver purchased reports
• To create and manage your account
• To analyze podcast reviews and generate pattern analysis reports
• To improve and personalize the Service
• To communicate with you about your account, updates, or support requests
• To detect and prevent fraud or abuse of the Service
• To comply with legal obligations

3. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers: Third-party vendors who assist in operating the Service (e.g., Stripe for payments, hosting providers). These parties are contractually obligated to protect your information.
• Legal compliance: When required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Usage records, including page view logs, are automatically deleted 13 months after collection. Podcast review data and analysis results are retained to enable ongoing analysis and historical comparison. You may request deletion of your account by contacting us at proofreport.team@gmail.com.

5. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted passwords, HTTPS transport, and access controls. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use first-party cookies to maintain your authentication state: a session cookie and a persistent login cookie that keeps you signed in between visits. The persistent cookie is removed when you log out and otherwise expires after approximately one year. We do not use third-party advertising cookies or cross-site tracking pixels.

7. Third-Party Services

The Service integrates with:

• Apple Podcasts: We access publicly available review and chart data via Apple's public APIs. We are not affiliated with or endorsed by Apple Inc.
• Stripe: Payment processing. Subject to Stripe's Privacy Policy.
• Google OAuth: Optional sign-in. Subject to Google's Privacy Policy.
• ipapi.co: On one public informational page, the visitor IP address is sent to ipapi.co to derive an approximate location (country, region, city) before the IP is hashed. Subject to ipapi.co's Privacy Policy.

All fonts, stylesheets, and scripts used by the Service are served from our own domain. Pages do not load resources from third-party content delivery networks.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at proofreport.team@gmail.com.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:
proofreport.team@gmail.com