Legal

Privacy Policy

Last updated: November 1, 2026

What We Collect

Account: Your email address. Payment information is handled entirely by Stripe. We never store card numbers.

Guest checkout: If you buy before creating an account, we create one for the email you enter at Stripe checkout and store the Stripe customer reference from that purchase. If a checkout is started but never completed, we keep the email Stripe collected so we can send a reminder that includes an unsubscribe link.

Starter kit purchases: Which kit you bought, the amount, the date, the Stripe payment reference, and whether the purchase was refunded or disputed.

Kit details and progress: The business details you enter in a kit (business name, your name, phone, email, service area and booking link), used only to fill in your downloads, and the plan days you tick. Your ticked days are also used to review a guarantee request.

Guarantee requests: If you ask for a refund under the kit guarantee, the answers you write and the screenshots or PDFs you attach. Only Dairon, who runs Proven, sees them, to decide the request.

Product submissions: The idea and product details you provide, through the onboarding flow or inside your dashboard. This is sent to AI to generate your roadmap and tool outputs and stored privately, only you can access it.

Onboarding answers: Before you create an account, Proven's onboarding flow asks about your idea, your target customer, and related details, to build your roadmap. Your answers are stored as soon as you give them, before you sign up. If you complete sign-up, they become part of your account; if you do not, they stay stored without being tied to an account.

Usage data: Page views and product interactions, collected via Datafast with first-party identifiers. No cross-site tracking. When you buy, we link your analytics visitor ID to the purchase so we can tell which pages lead to revenue, and we identify paid accounts to Datafast.

How We Use It

Running Proven and generating your roadmap and tool outputs
Running weekly competitor and market scans for active subscribers, and emailing a recap of what changed
Processing payments via Stripe
Sending authentication and transactional emails via Resend
Sending follow-up emails (guest follow-ups and reminders about unfinished checkouts), each with an unsubscribe link
Tracking whether our emails get opened, via Resend
Measuring product usage via Datafast
Responding to support requests

We do not sell or monetize your data.

Third-Party Services

Convex: database and authentication
Stripe: payment processing (PCI DSS compliant)
Resend: transactional email delivery
Vercel: platform hosting
Datafast: product analytics (first-party identifiers, no cross-site tracking)
Anthropic: AI model processing. Your product submissions and onboarding answers are sent to Anthropic's API to generate your roadmap and tool outputs. Anthropic's privacy policy applies to this processing.

Cookies

Proven sets a few first-party cookies. datafast_visitor_id and datafast_session_id count visits and tell which pages lead to a purchase. proven_auth_hint and the sign-in cookies keep you signed in. There are no advertising cookies. You can block or delete cookies in your browser; the site still works, and you'll need to sign in again.

Affiliate Links

Some links in kits and articles are affiliate links. When you click one, you go to the partner's site, and its own privacy policy applies there.

Data Retention

Your data stays for the lifetime of your account. On deletion, it's removed within 30 days. Expedited deletion available on request. Purchase records are kept as long as tax and payment rules require. Guarantee requests and their attachments are kept until the request is settled and for 12 months after, then deleted on request.