Privacy policy

This Privacy Policy applies to the Proveria platform — the desktop app, the web portal, and the Proveria-operated service behind them at proveria.com — and to the marketing website. It covers Proveria-operated accounts, private workspaces, and managed deployments; it does not describe customer-hosted infrastructure.

• Attestation metadata — Merkle root hash, protocol version, file and passage counts, timestamp, signer device-key fingerprint, retention policy, access mode.
• Verification metadata — verifier identity, submitted file and passage hashes only, match or no-match result, proof payload, receipt, timestamp.
• Account & billing data — admin contact name, work email, organization, payment method, invoice history.
• Operational telemetry — request logs, error reports, service performance metrics with redaction applied to any protocol payload.

We do not receive, store, or transmit raw files, raw document content, or any reconstructable plaintext. The desktop app hashes and processes materials locally; only cryptographic metadata is submitted to the platform. The only thing crossing the network is hashes, metadata, and the receipt payload. This is structural, not policy.

• Operate the Proveria platform.
• Manage the customer relationship and meet tax/accounting obligations.
• Detect outages, improve reliability, respond to security incidents.

• Attestation + verification metadata: per-attestation config (30 days minimum to indefinite, tier-dependent).
• Account + billing: life of the customer relationship + tax/accounting period (typically seven years).
• Operational telemetry: 90 days unless an active incident requires longer.

Public list on the trust page. Customers notified at least 30 days before a new subprocessor goes live. International transfers covered by SCCs (EU 2021/914), the UK IDTA, or equivalent.

Access, correction, deletion, portability, objection. Requests are processed manually until the formal data subject rights workflow ships, with response times aligned to GDPR. Please contact us and mark the message as a privacy request.

Encryption at rest (AES-256-GCM), encryption in transit (TLS 1.3; connections refused below a TLS 1.2 floor), producer-side device signing with Ed25519, and role-gated staff access. Full posture on the security page.

Material changes announced by email to customer admin contacts at least 30 days before they take effect.

For privacy or trust matters, please contact us and mark the message accordingly.