Privacy Policy

Proofly (“Proofly”, “we”, “us”) provides a video testimonial platform that lets founders collect, approve, and embed customer stories. This Privacy Policy describes how we handle personal data for two groups of people: account holders (the founders and teams who sign up for Proofly) and contributors (the customers who record testimonials in response to a request link).

By using Proofly, you agree to this policy. If you do not agree, please do not use the service.

We collect only the data we need to operate the service:

• Account data. Name, email address, hashed password (or your OAuth identifier), workspace name, and billing details processed by our payment provider.
• Testimonial submissions.Video and audio recordings, written text, the contributor’s self-supplied name and email, and the consent record (timestamp, IP address, user agent, and the surfaces consented to).
• Usage data. Pages viewed, features used, request and embed performance, and basic device information for product analytics and abuse detection.
• Cookies. A first-party session cookie for authentication and a small number of functional cookies for preferences. We do not use third-party advertising trackers.

We use the data above to:

• Provide, maintain, and improve the Proofly service.
• Render testimonial request pages, store recordings, and serve embeds and Walls of Love that account holders publish.
• Process payments and prevent fraud or abuse.
• Send transactional email (account, billing, submission notifications) and occasional product updates that you can unsubscribe from.
• Comply with legal obligations and respond to lawful requests from authorities.

We do not sell personal data, and we do not use customer testimonial recordings to train AI models.

Every testimonial submitted through Proofly includes an explicit consent checkbox that names the surfaces where the recording may be published (for example: website, social media, ads). Contributors can:

• Request a copy of the recording and the consent record we hold.
• Withdraw consent and request removal at any time by emailing contact@useproofly.app.
• Ask us to correct inaccurate personal data associated with their submission.

When a contributor withdraws consent, the account holder will be notified and the recording will be removed from Proofly-hosted embeds within seven (7) days. Account holders are responsible for removing copies they have downloaded or published outside Proofly.

We share personal data only with vetted sub-processors required to run the service. These currently include:

• Supabase— database and authentication.
• Cloudflare R2— storage for video and audio recordings.
• Polar— subscription billing and payments.
• Resend— transactional email delivery.
• Vercel— application hosting and edge delivery.

We do not share contributor recordings with any party outside the workspace that owns the request, except as strictly necessary to deliver the service or when required by law.

We retain account data for as long as the workspace is active, plus thirty (30) days after deletion to allow for recovery and dispute resolution. Testimonial recordings are retained for as long as the owning workspace keeps them; when a workspace is deleted, all associated recordings are queued for permanent deletion within thirty (30) days.

Limited records (consent logs, billing receipts) may be retained longer where required by tax, accounting, or legal obligations.

We protect data with industry-standard safeguards: encryption in transit (TLS 1.2+), encryption at rest for stored recordings, scoped credentials with least-privilege access, signed URLs for media playback, and row-level security on the database.

No system is perfectly secure. If we discover a breach affecting your data we will notify affected users without undue delay and in line with applicable law.

Proofly is operated from the United States and our processors host data in the US and EU. By using the service you consent to data being transferred to and processed in those regions. We rely on appropriate safeguards (such as the EU Standard Contractual Clauses) where required.

Depending on where you live, you may have the right to access, correct, port, or delete your personal data, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email us at contact@useproofly.app. We respond within thirty (30) days.

We do not sell or “share” personal information as defined under the California Consumer Privacy Act.

Proofly is not directed to children under sixteen (16). We do not knowingly collect personal data from children. If you believe a child has submitted a recording, contact us and we will remove it.

We may update this Privacy Policy from time to time. Material changes will be announced by email to account holders or via a notice in the dashboard at least fourteen (14) days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

For privacy questions, data requests, or to report a concern, write to contact@useproofly.app.