Data Protection

prod — Privacy Policy

Your privacy is important to us

Last updated: March 1, 2026

Introduction

provd ('we', 'our', 'Platform') is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our professional achievement tracking platform.

This policy applies to all provd users, including visitors, registered users, and subscribers. By using our Service, you agree to the practices described in this policy.

GDPR Compliance

We comply with the European Union's General Data Protection Regulation (GDPR) and respect your rights over your personal data.

1 Data We Collect

Account Data

When you create a provd account, we collect:

  • Email: For authentication and communication
  • Username: To identify your account
  • WhatsApp number (optional): To enable WhatsApp integration
  • Password (encrypted): For account security

Achievement Data

The core content you create on provd:

  • Achievement records: Titles, descriptions, and dates you log
  • Projects and companies: Organisational context you provide
  • Voice note transcriptions: Text derived from audio messages sent via WhatsApp
  • Generated reports: PDF files created from your achievement data

Usage Data

To improve the service, we automatically collect:

  • Device information: Browser type, operating system, IP address
  • Access logs: Timestamps and actions within the platform

Payment Data (Subscribers)

Important: We do NOT store credit card data. All payments are securely processed through Stripe, a PCI-DSS Level 1 certified payment processor.

We only store:

  • Subscription ID (provided by Stripe)
  • Subscription status (active, canceled, etc.)
  • Invoice history

What We DON'T Collect:

  • Sensitive data (race, religion, political opinions, health)
  • Complete financial data (card numbers, CVV)
  • Data from minors under 18 (knowingly)
  • Raw audio files — voice notes are transcribed and the audio is discarded

2 How We Use Your Data

We use your personal data to:

Provide the Service

Store your achievements, generate AI-polished descriptions, and produce PDF reports

WhatsApp Integration

Process incoming messages and voice notes to create achievement records on your behalf

Security

Prevent fraud, enforce rate limits, and protect against unauthorized access

Communication

Send achievement confirmations via WhatsApp and respond to support questions

3 Data Sharing

No Sale Policy

We NEVER sell, rent, or trade your personal data to third parties.

We only share data in the following situations:

Service Providers

We use third-party services to operate the platform:

  • Payment processor: Handles subscription billing (PCI-DSS compliant)
  • AI processing service: Polishes achievement descriptions (text only, no personal identifiers)
  • Transcription service: Converts voice notes to text (audio is not retained)
  • Messaging infrastructure: Delivers WhatsApp messages on our behalf
  • Hosting provider: Secure data storage and platform infrastructure

Legal Obligations

We may disclose data if legally required (court order, tax authorities, criminal investigations) or to protect our legal rights.

4 Data Security

We implement technical and organisational security measures to protect your data:

SSL/TLS Encryption

All communications are encrypted in transit

Password Hashing

Passwords are hashed and never stored in plain text

Firewall & Rate Limiting

Protection against attacks and abuse of the WhatsApp integration

Access Control

Restricted access only to authorised personnel

Important: No system is 100% secure. While we implement best practices, we recommend using a strong, unique password for your provd account.

5 Your Rights (GDPR)

Under GDPR, you have the following rights over your personal data:

Right of Access

Request a copy of all data we hold about you

Right of Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your data ('right to be forgotten')

Right to Portability

Export your achievements in JSON, PDF, or CSV format at any time

How to Exercise Your Rights

To exercise any of these rights, contact us at:

support@provd.app

6 Data Retention

We retain your data only as long as necessary:

Active Account

While your account is active and you use the service

Inactive Account

Up to 2 years after last activity, then automatically deleted

After Account Deletion

30-day recovery period, then permanently and irreversibly deleted

7 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements.

How We'll Notify You

  • Email to registered users (for material changes)
  • Prominent notice on the platform
  • Update of the 'Last updated' date at the top of this page

Contact — Data Protection

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Privacy Email: support@provd.app

Address: Portugal

This Privacy Policy is part of our Terms of Service.

© 2026 provd. Committed to your privacy and security.