Legal
Privacy Policy
Last updated: August 28, 2026
What We Collect
Account: Your email address. Payment information is handled entirely by Stripe. We never store card numbers.
Guest checkout: If you buy before creating an account, we create one for the email you enter at Stripe checkout and store the Stripe customer reference from that purchase. If a checkout is started but never completed, we keep the email Stripe collected so we can send a reminder that includes an unsubscribe link.
Product submissions: The idea and product details you provide, through the onboarding flow or inside your dashboard. This is sent to AI to generate your roadmap and tool outputs and stored privately, only you can access it.
Onboarding answers: Before you create an account, Proven's onboarding flow asks about your idea, your target customer, and related details, to build your roadmap. Your answers are stored as soon as you give them, before you sign up. If you complete sign-up, they become part of your account; if you do not, they stay stored without being tied to an account.
Usage data: Page views and product interactions, collected via Datafast with first-party identifiers. No cross-site tracking. When you buy, we link your analytics visitor ID to the purchase so we can tell which pages lead to revenue, and we identify paid accounts to Datafast.
How We Use It
- Running Proven and generating your roadmap and tool outputs
- Running weekly competitor and market scans for active subscribers, and emailing a recap of what changed
- Processing payments via Stripe
- Sending authentication and transactional emails via Resend
- Sending follow-up emails (guest follow-ups and reminders about unfinished checkouts), each with an unsubscribe link
- Tracking whether our emails get opened, via Resend
- Measuring product usage via Datafast
- Responding to support requests
We do not sell or monetize your data.
Third-Party Services
- Convex — database and authentication
- Stripe — payment processing (PCI DSS compliant)
- Resend — transactional email delivery
- Vercel — platform hosting
- Datafast — product analytics (first-party identifiers, no cross-site tracking)
- Anthropic — AI model processing. Your product submissions and onboarding answers are sent to Anthropic's API to generate your roadmap and tool outputs. Anthropic's privacy policy applies to this processing.
Data Retention
Your data stays for the lifetime of your account. On deletion, it's removed within 30 days. Expedited deletion available on request.
Your Rights
You can request export, correction, or deletion of your data at any time by contacting us.