Privacy Policy

This Privacy Policy explains how [Company Legal Name] (“Prov”, “we”) collects, uses, and protects information when you use the Prov platform at [yourdomain.com] (the “Service”).

Information we collect

• Account data — your email address and any agency/branding details you provide.
• Usage data — campaigns you create, outreach you send, and activity within the Service.
• Connected accounts — if you connect Google/Gmail, we store OAuth tokens to send email and read your calendar on your behalf. We do not read your inbox beyond what the granted scopes allow.
• Creator data — publicly available information about creators (name, platform, audience metrics, and, where available, business contact email) used for discovery and outreach.
• Payment data — handled by Stripe. We do not store card numbers.

How we use information

• To operate the Service — discovery, campaigns, sending outreach from your connected email, contracts, analytics.
• To process subscriptions and billing through Stripe.
• To send you transactional messages (login codes, receipts, product notices).
• To improve and secure the Service.

Google API data

Prov's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail access only to send outreach you initiate, and Calendar access only to show your availability. We never sell this data or use it for advertising.

Sharing

We do not sell your personal data. We share data only with service providers that run the Service on our behalf — Supabase (database/auth), Stripe (payments), Resend (transactional email), Google (email/calendar you connect), and our hosting provider — each bound to protect it.

Data retention & your rights

We retain your data while your account is active. You may request access, correction, export, or deletion of your data, and you may disconnect Google at any time in Settings. To exercise these rights, contact [contact@yourdomain.com].

Security

We use industry-standard measures to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Contact

Questions about this policy: [contact@yourdomain.com], [Company Legal Name], [Mailing Address].