Privacy Policy

ProofWorks Studio is operated by Shawn Hernandez, doing business as ProofWorks Studio, based in California. For privacy-related matters, contact us at support@proofworks.studio.

Information You Provide

Account information (name, email, company, job title), payment information (handled by Stripe — we never store card numbers), User Content (business metrics, crew info, equipment, pricing, goals, and other operational data), and communications (feedback, support requests).

Information Collected Automatically

Usage data (features accessed, actions taken, session duration), device and browser data (browser type, OS, IP address), server logs, and authentication tokens.

Information from Third-Party Integrations

Google OAuth provides your name, email, and profile photo for login. Google Calendar provides event data (titles, descriptions, dates, times, locations, attendees) when you connect Dispatch X. Stripe provides payment confirmation and subscription status. Mapping services (Google Maps, Mapbox) provide route data for drive time estimates.

We use your information to: provide and operate the Service; process payments; personalize your experience; power AI features; improve the Service using aggregated, anonymized data; communicate with you about your account and product updates; enforce our Terms of Service; comply with legal obligations; and protect the security of the Service and its users.

What We Don't Do

We do not sell your personal data. We do not use your personal data to serve third-party advertising. We do not share your individually identifiable data for marketing purposes.

Service Providers

We share data with vendors that help us operate the Service: Stripe (payments), Supabase (database), Vercel (frontend hosting), Railway (backend hosting), Anthropic / OpenAI (AI features), Google (auth, Calendar, Maps), Mapbox (mapping), and Sentry (error monitoring). All providers are contractually required to protect your data.

Within Your Team

Data shared within a team workspace is visible to authorized team members and administrators per your team's permission settings.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of ProofWorks Studio, our users, or the public.

Business Transfers

If ProofWorks Studio is acquired or merged, your data may be transferred to the acquiring entity. We will provide notice before your data becomes subject to a different privacy policy.

Google Services

Your use of Google integrations is governed by Google's Privacy Policy (policies.google.com). We request only minimum permissions necessary for the specific feature you enable.

Stripe

Payment information is transmitted directly to and governed by Stripe's Privacy Policy (stripe.com/privacy). We do not store full payment card details.

AI Providers (Anthropic / OpenAI)

AI features transmit your inputs to Anthropic and/or OpenAI APIs for processing. We use API-only access under enterprise terms, which typically prohibit those providers from using API inputs for model training by default. Please review Anthropic's and OpenAI's privacy policies for details.

Where Your Data Lives

Your data is stored in the United States via Supabase (database), Vercel (frontend), and Railway (backend). By using the Service, you consent to storage in the United States.

Security Measures

We use HTTPS/TLS encryption for all data in transit, database encryption at rest via Supabase, role-based access controls, JWT token authentication, and regular security updates.

Breach Notification

If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law, typically within 72 hours.

We retain your data for as long as your account is active. After cancellation or termination, we retain your data for 30 days to allow for export requests. After 30 days, data is permanently deleted, except for records required by law, aggregated/anonymized data, and encrypted backups which may persist up to 90 days.

Access and Correction

You may access and update your personal information directly in account settings, or by contacting support@proofworks.studio.

Deletion

You may request deletion of your account and personal data by contacting support@proofworks.studio.

Data Portability

You may request a copy of your personal data in a portable, machine-readable format.

Opt-Out of Marketing

You may opt out of marketing emails at any time via the unsubscribe link in any marketing email. Transactional emails (billing, security) cannot be opted out of while your account is active.

Connected Services

You may disconnect Google Calendar and other third-party integrations from within the Service at any time.

Your Rights

California residents have the right to: know what personal information we collect and how we use it; request deletion of personal information; request correction of inaccurate data; opt out of the sale or sharing of personal information (we do not sell or share personal information); and be free from discrimination for exercising these rights.

How to Submit a Request

Email support@proofworks.studio with subject line "California Privacy Request." We will respond within 45 days. You may also designate an authorized agent to make requests on your behalf.

What We Use

We use cookies and browser storage for authentication (keeping you logged in), preferences (remembering your settings), and internal analytics (understanding how features are used). We use aggregated, anonymized data only.

What We Don't Use

We do not use third-party advertising cookies, cross-site tracking, or behavioral advertising networks.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we may have such information, contact us at support@proofworks.studio.

How It Works

When you use AI-powered tools (Consultation X, Director X, QA X, Sort X), the specific content you enter in that session is transmitted to Anthropic and/or OpenAI APIs to generate responses. We do not transmit your full profile, payment information, or unrelated data to AI providers.

AI Training by ProofWorks Studio

We may use anonymized, aggregated interaction data to evaluate and improve our AI prompt engineering and feature design. We will not use your individually identifiable inputs for AI model training without your explicit consent.

Data Isolation

ProofWorks Studio enforces strict data isolation between organizations. Your organization's data is never accessible to another organization's workspace.

Employee and Crew Data

If you use Dispatch X or Equipment X, you may enter personal information about employees or contractors (names, email addresses, home addresses). You represent that you have obtained appropriate consent from those individuals and that your use complies with applicable employment and privacy law.

We may update this Privacy Policy at any time. For material changes, we will provide at least 30 days' advance notice via email or in-app notification. Continued use of the Service after changes constitutes your acceptance of the updated policy.