Privacy Policy

Who we are

Proof is built and operated by Torem Labs (7045 Boulevard Notre-Dame, Laval, Québec, Canada H7X 3Y6). For any privacy question, use the contact form on the home page.

What we collect

• Account info: your email, and a display name if you set one.
• Workspace content (concepts, projects, ideas, conversations, files, notes). Stored locally and synced to your account when you sign in.
• Provider API keys and your GitHub token, if you connect them. They are encrypted at rest in Supabase Vault and no other user can read them; Proof decrypts a key only to make a call you asked for. Use narrowly scoped keys and rotate them if you stop using Proof.

What we do not collect

No ad pixels. No identifiers shared with ad networks. We do not intercept or log the traffic between your browser and your AI provider, and we do not sell your data. Chats you hold inside Proof are workspace content: they are stored in your workspace and sync to your account, like the rest of it.

Product analytics

We use PostHog to see which pages get opened, which buttons get clicked, and how quickly pages load. It reads the visible text of what you click, so anything carrying your ideas is marked to stay out of it, and it never records what you type. Ingestion runs through our own domain, so a content blocker will not stop it. The switch that does is in Settings, and it is honoured before the first event fires.

AI providers

When you bring your own AI key, we never see your prompts or responses. Your traffic goes to the provider you chose, under their terms.

How we use your data

We use your data to run Proof: keep you signed in, sync your workspace across devices, and support you when you ask. We do not sell your data and we do not share it with advertisers.

Sharing

We use trusted third-party processors to run the service (hosting, database, authentication). They handle data on our behalf under contractual safeguards. Payment processing is handled by Stripe, who receive the billing details needed to take payment; we never store your card number. Paid plans are charged per the pricing page. The local app remains free. The only other sharing is with collaborators you explicitly invite to a workspace.

Cookies

We use cookies to keep you signed in and to remember your preferences. PostHog sets one so we can tell one visit from another, and turning analytics off in Settings stops it. No advertising cookies.

Retention and your rights

You can export, correct, and delete your workspace at any time from Settings. When you delete a workspace or close your account, we remove your data from our systems. Routine backups may retain a copy for up to 30 days before they roll off.

International transfers

We are based in Canada. Our infrastructure providers may process your data in regions outside Canada. Where required by law, we rely on standard contractual safeguards for cross-border transfers.

Children

Proof is not intended for anyone under 13, and we do not knowingly collect data from children.

Changes

If we change this policy, we will update the date at the top. For material changes we will email account holders.

Contact

Questions, requests, or corrections: the contact form on the home page reaches us directly.