Privacy policy

Account information. Your email address, and the account you belong to. Created when someone invites you; we do not collect it any other way.

Google Analytics and Google Search Console data. If you connect a Google account, Proof reads the reports you choose to connect: sessions, users, landing pages, traffic sources and conversion events from Analytics; and search queries, pages, clicks, impressions, click-through rate and average position from Search Console.

Your website’s pages. Proof fetches pages from the site being reported on, the same way any search engine crawler does, to check titles, descriptions, headings, structured data and page speed.

We do not collect payment details, and Proof has no advertising of any kind.

Proof requests exactly two Google permissions, and both are read-only:

• analytics.readonly — to read the Analytics property you connect.
• webmasters.readonly — to read the Search Console property you connect.

Proof cannot change anything in your Google account, cannot see any other Google service, and cannot read any property you do not explicitly connect. We use this data for one purpose: producing the reporting, diagnosis and content recommendations shown inside Proof for the account the data came from.

Google API Services Limited Use disclosure.Proof’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising, and we do not use it to train generalised artificial-intelligence models.

We do not sell data, and we do not share it with anyone for their own purposes. We use the following providers to operate Proof, each acting only on our instructions:

• Supabase — database, authentication and encrypted storage of the access tokens you grant.
• Vercel — hosting.
• Anthropic, OpenAI, Perplexity, xAI and Google — the AI models Proof uses to draft content and to check whether a brand is cited in AI answers.
• DataForSEO — search results and keyword data for the terms being tracked.
• Resend — notification email.

Worth being specific about. When you ask Proof to research or draft an article, the search terms behind that topic — which may come from your Search Console data — are sent to Perplexity and Anthropic in order to produce the research and the draft. This is the feature doing what it says it does, and it happens only when you start it. No Analytics or Search Console data is sent anywhere else.

We do not use your data to train any model, and we have no model of our own to train. What each provider does with an API request is governed by that provider’s own terms: Anthropic and OpenAI both state that they do not train on data submitted through their APIs by default. We have not independently confirmed the equivalent position for every provider we use, so we state what we know rather than making a blanket promise on their behalf. If you would rather a particular provider never saw your data, tell us and we will exclude it for your account.

Reporting data is kept for as long as the account is active, because the product’s purpose is comparing now against before — a record that is deleted every ninety days cannot show whether a change made twelve months ago worked.

When an account is closed, its data is deleted within 30 days. You can ask us to delete it sooner.

You can revoke Proof’s access to your Google account at any time from your Google account permissions page. Proof stops being able to read anything the moment you do. Data already collected stays in your Proof account until you ask us to remove it, or the account is closed.

To request deletion of your data, or a copy of it, email matt.wcmedia@gmail.com. We will respond within 30 days.

Access tokens are stored encrypted, separately from the rest of the database, and are never shown in the interface or sent to a browser. Every account’s data is isolated at the database level, so one account cannot read another’s. Access to production data is limited to WC Media staff who need it to operate the service.

No system is perfectly secure. If a breach affects your data, we will tell you.

Proof is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

If we change how we handle data, we will update this page and the date at the top. For a change that materially affects you, we will tell account owners directly rather than relying on you to check.

WC Media LLC, Louisville, Kentucky, United States. matt.wcmedia@gmail.com