Privacy

This privacy placeholder is for counsel review. It is not a final privacy policy. Do not treat it as a complete description of every processor or retention period.

• Wallet addresses you connect or authenticate with (public on Solana).
• Session cookies and server-side session rows used to keep you signed in.
• Project drafts, uploads, reports, and proof evidence you submit to PROVE's off-chain database.
• Operational logs (with secret redaction) and indexed on-chain activity needed to run the product.
• Optional GitHub account linkage when you authorize OAuth (read:user scope). Access tokens stay encrypted at rest and are not returned to the browser.

Product usage ingest rejects personal data such as emails, phone numbers, government IDs, payment instruments, legal names, postal addresses, passwords or tokens, IP addresses, user agents, and dates of birth. Do not put that material into evidence fields either.

Depending on environment, data may pass through hosting (for example Vercel), managed Postgres / Supabase, object storage, Solana RPC providers (including Helius on staging), and email or error-monitoring tools if configured later. Counsel should list processors before production.

Anything you publish on Solana is public. PROVE cannot make a confirmed transaction private.