Privacy Policy

Account information: When you register, we collect your email address and, optionally, your name.

Payment information: Payments are processed by Stripe. We store only a Stripe customer ID - we do not store full credit card numbers.

Usage data: Optional measurement is controlled by the privacy choices shown on the site. The Analytics choice governs privacy-limited PostHog product events, Google Analytics traffic measurement, Vercel Web Analytics, Vercel Speed Insights, and Microsoft Clarity behavior measurement on public marketing and blog pages only. Clarity is not loaded on search, report, checkout, authentication, dashboard, or admin routes. The Advertising choice governs Google Ads storage, ad user data, ad personalization, conversion measurement, and whether Clarity may use advertising storage. PostHog receives path-only pageviews, named funnel steps, and, for signed-in users, an opaque account identifier and plan tier. Our Google events use query-free route locations, replace public report slugs with a generic report route, and use that normalized route instead of the document title. The GA4 browser destination stays off until the property's entire Enhanced Measurement feature is disabled, preventing built-in Site Search from reading searched business names from URL parameters. We do not intentionally send your email address, searched business name, internal report identifier, or full URL query strings to these analytics tools.

Company selections: When you choose a company from public search results, we increment a daily aggregate count tied to that public company record. This count does not store your query, account, IP address, cookie, session, or other visitor identifier, and it is not a count of unique people.

Operational data: Inngest processes the report inputs and step results needed to run background checks. Separately, for reliability and troubleshooting, we keep limited execution telemetry such as report-linked phase and source names, timing, bounded outcomes, and opaque processing identifiers. This telemetry ledger does not contain your search terms, business names, raw provider responses, or raw error messages.

We use your information to provide the Service, process payments, send transactional emails such as account confirmations, and improve ProofReports.

We do not sell your personal information to third parties. We do not use your data for advertising profiling.

ProofReports analyzes publicly available information about businesses - including Secretary of State records, WHOIS data, Google Business Profiles, BBB records, website content, and public social media. This data pertains to businesses, not individuals, and is sourced from public databases.

We use necessary cookies to maintain your session, remember your login state, secure checkout, and store your privacy choice for 180 days. Necessary storage cannot be disabled through the site because the Service depends on it.

Analytics and Advertising are separate optional choices. Until you choose, Google Consent Mode initializes analytics storage, ad storage, ad user data, and ad personalization as denied. A saved choice is reapplied before Google tag configuration, and you can reopen Privacy choices at any time to grant or revoke either category. When optional Google consent is denied, Google may still receive limited cookieless consent-state or page-measurement pings using normalized, query-free routes. PostHog, Vercel Web Analytics, Vercel Speed Insights, and Microsoft Clarity do not load until Analytics is allowed. Revoking Analytics sends denied consent to Clarity, clears its cookies, and removes its tag. The Google Ads Purchase event requires Advertising consent, is limited to a successfully reconciled one-time payment Checkout, and uses an opaque Checkout Session id for deduplication; subscription and free-trial starts are not sent as purchases. These tools are used for aggregate measurement, not to build a ProofReports remarketing audience.

We retain your account data for as long as your account is active. You may request deletion of your account and associated personal data at any time via our Contact page at proofreports.com/contact.

When you delete your account we remove your login, session, and linked personal records. We retain a limited, hashed deletion audit record (hashed email and IP, Stripe customer id, truncated user agent) for 24 months solely for chargeback, fraud, and legal dispute evidence. A daily deletion job purges the record after that period.

Report data (business trust scores) and company-level selection aggregates may be retained for analysis and quality improvement. Selection aggregates contain no visitor identifier and are deleted if the associated company record is deleted.

Report execution telemetry is retained for up to 30 days and then automatically deleted.

We implement industry-standard security measures including TLS encryption in transit, encrypted database connections, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We use the following third-party services: Stripe (payment processing), Resend (transactional email), Neon (database hosting), Upstash (caching), Vercel (hosting), Inngest (background processing), Sentry (error monitoring), PostHog (privacy-limited product analytics), Microsoft Clarity (consent-gated public-page behavior measurement), and Google Analytics and Google Ads (aggregate traffic and conversion measurement). Each has its own privacy policy governing its data practices.

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, visit our Contact page at proofreports.com/contact.

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy questions or data requests, visit our Contact page at proofreports.com/contact.