Privacy policy

ProofPost is operated by PrimoDevStudio. We are the controller of the account, website, support, and service-administration data described in this policy.

Privacy questions and rights requests can be sent to hello@proofpost.pro.

We collect information you provide, including your name, email address, organisation, account settings, brand assets, support messages, and content you upload or create.

When you connect a review source or publishing account, we process the account identifiers, authorisation tokens, reviews, ratings, customer names or handles, media, and publishing data needed to provide the features you select. We also receive security and technical information such as IP address, browser, device, request, error, and diagnostic data.

Dodo Payments processes checkout, payment method, billing address, tax, invoice, fraud, refund, and dispute information. ProofPost receives transaction identifiers, subscription status, plan, amount, currency, and related billing status, but does not store full payment-card details.

We process data to create and secure accounts; import reviews; generate, approve, and publish content; operate subscriptions; provide support; prevent abuse; maintain and improve the service; comply with tax, accounting, and legal duties; and establish or defend legal claims.

Our legal bases are performance of our contract, compliance with legal obligations, our legitimate interests in operating and securing the service, and consent for optional analytics or advertising technologies where required. You may withdraw consent at any time without affecting earlier lawful processing.

We use service providers only where needed to run ProofPost. They include Supabase for authentication, database, and storage services; Vercel for application hosting and delivery; Sentry for error and performance monitoring; and, only after the relevant consent, Google Tag Manager and Google Analytics for website measurement.

Dodo Payments is the Merchant of Record and an independent controller for payment, tax, fraud-prevention, refund, and transaction-compliance data. Connected review and social platforms process data under their own terms when you authorise an integration.

We may also disclose information to professional advisers, authorities where legally required, or a successor in a merger, financing, reorganisation, or sale subject to appropriate confidentiality. We do not sell personal data.

We keep account and customer content while the account is active and for a limited period afterward where needed for restoration, security, disputes, or legal compliance. Billing and transaction records may be retained for statutory tax and accounting periods. Diagnostic and analytics records are kept according to configured provider retention periods and operational need. Data is deleted or anonymised when it is no longer required.

Some providers or connected platforms may process data outside your country. Where required, we rely on adequacy decisions, approved standard contractual clauses, or another lawful transfer mechanism.

Depending on your location, you may ask to access, correct, erase, restrict, object to, or receive a copy of your personal data. You may withdraw consent and complain to your local data-protection authority. We may verify your identity and may retain information where law permits or requires it.

If ProofPost processes personal data solely on a business customer’s instructions, requests relating to that data should normally be directed to that customer. We will assist the customer as required.

We use access controls, encrypted transport, restricted credentials, monitoring, backups, and other safeguards proportionate to the risk. No internet service can guarantee absolute security. ProofPost is a business service and is not directed to children.

We may update this policy to reflect legal, provider, or product changes. The date above identifies the current version, and material changes will receive additional notice where required.