Privacy policy

ProofKit (“ProofKit”, “we”, “us”) helps contractors turn job photos into marketing — Google Business Profile posts, review requests, and review replies. This policy explains what we collect, why, and the control you keep over it. The short version: your data is yours, we don’t sell it, and you can export or delete it at any time.

Information we collect

• Account information. Your name, email address, phone number, and business details you provide when you join the waitlist or create an account.
• Job content. Photos you capture or upload, project details, captions, and posts you create in ProofKit.
• Customer contacts you add. Names and contact details of your customers that you enter to send review requests. You confirm you have their permission before adding them.
• Google Business Profile data (only if you connect your Google account) — described in detail below.
• Usage data. Basic product analytics (pages viewed, features used) to improve ProofKit.

Google user data

When you choose to connect your Google account, ProofKit requests access to your Google Business Profile via Google’s official APIs. Specifically, we:

• Access your Business Profile account and location details (business name, location ID) so you can pick the profile ProofKit manages.
• Create posts (photos and captions you approve) on your Business Profile when you tap publish.
• Read your reviews so they appear in the app, and publish the review replies you approve.
• Read profile performance data (calls, clicks, direction requests) to show you real results in your dashboard.

We store the minimum needed to provide these features: your OAuth tokens (encrypted at rest), your selected business location, and copies of your posts, reviews, and performance metrics. We never post anything without your explicit approval in the app.

ProofKit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except with your permission, for security purposes, or as required by law.

How we use AI

ProofKit uses AI to pick your best job photos and draft captions, review requests, and review replies. Your photos and related job details are processed by our AI providers solely to generate that content for you. We do not use your content to train third-party foundation models.

Text messages

If you join the waitlist and provide your phone number, you agree that ProofKit may text you about your invite and account. Reply STOP to opt out at any time. Review requests to your customers are sent from your own phone — ProofKit prepares the message, you send it.

What we don’t do

• We don’t sell your data — ever.
• We don’t run third-party ads or share your data with ad networks.
• We don’t post to your profiles without your approval.

Sharing

We share data only with the service providers that run ProofKit (hosting, database, AI processing, analytics), each bound to use it solely to provide their service to us, and when required by law.

Retention, export & deletion

We keep your data while your account is active. You can export your photos, reviews, and contacts at any time, and you can request deletion of your account and all associated data — including revoking ProofKit’s access to your Google account at myaccount.google.com/permissions. Deletion requests are completed within 30 days.

Security

Data is encrypted in transit and at rest. OAuth tokens are stored encrypted, and access is limited to what the product needs to function.

Children

ProofKit is for businesses and is not directed to anyone under 16.

Changes

If we make material changes to this policy, we’ll update this page and note the date above.

Contact

Questions or requests: henryarbolaez@gmail.com