Privacy Policy
Effective Date: February 26, 2026
1. Introduction
ProvenLabs ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites, applications, and services, including provenlabs.io, Hub Helper Harry, ProvenPath, ProvenCRM, ProvenMarket, and ProvenAdvisor (collectively, the "Services").
By using the Services, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Services.
2. Information We Collect
2.1 Information You Provide
- Account information, Name, email address, company name, and job title when you create an account or fill out a contact form.
- Communications, Messages, feedback, and support requests you send to us.
- Payment information, Billing details processed through our third-party payment processor (we do not store full payment card numbers).
- Content you submit, Queries, prompts, or data you input into our products (e.g., company names entered into ProvenPath, chat messages sent to Hub Helper Harry).
2.2 Information Collected Automatically
- Usage data, Pages visited, features used, time spent, click patterns, and interaction sequences.
- Device information, Browser type, operating system, screen resolution, and device identifiers.
- Network information, IP address, approximate geographic location (city/region level), and referring URL.
- Cookies & similar technologies, We use cookies, local storage, and similar technologies for authentication, preferences, and analytics. See Section 7 for details.
2.3 Information from Third Parties
- OAuth & SSO providers, If you sign in via a third party (e.g., Google, HubSpot), we receive your name, email, and profile photo as authorized by you.
- Integrated platforms, If you connect a third-party service (e.g., HubSpot CRM sync for ProvenCRM), we access the data you explicitly authorize.
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide and operate the Services | Account info, content you submit, usage data |
| Improve and develop new features | Usage data, device info, aggregated analytics |
| Communicate with you (support, updates) | Email, name, communications |
| Process payments | Billing details (via payment processor) |
| Ensure security and prevent fraud | IP address, device info, usage patterns |
| Comply with legal obligations | Any data as required by law |
| Personalize your experience | Preferences, usage data |
We do not sell your personal information. We do not use your data for third-party advertising. We do not use content you submit to our AI-powered products to train machine learning models, except in anonymized, aggregated form to improve product quality.
4. AI-Specific Data Practices
Our AI-powered products (Hub Helper Harry, ProvenCRM, ProvenPath) process your inputs to generate responses. Here is how that data is handled:
- Hub Helper Harry, Your chat messages are processed by our AI model to generate responses. Conversations are not used to train AI models. You can delete your conversation history at any time.
- ProvenCRM, Simulation configurations and generated data are stored within your account. If you connect a live CRM, we access only the data scopes you explicitly authorize.
- ProvenPath, Company names and queries you submit are used to retrieve publicly available business data. We do not retain search queries beyond the session unless you save a report.
5. How We Share Your Information
We share your information only in the following circumstances:
- Service providers, Hosting, payment processing, email delivery, and analytics providers who process data on our behalf under contractual obligations.
- Legal requirements, When required by law, legal process, or government request.
- Business transfers, In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. You will be notified of any such change.
- With your consent, When you explicitly authorize sharing with a specific third party.
We do not share your information with advertisers or data brokers.
6. Data Retention
- Account data, Retained for the duration of your account plus 30 days after deletion request.
- Usage analytics, Aggregated and anonymized data may be retained indefinitely for product improvement.
- Communications, Support tickets and emails are retained for 3 years.
- AI conversation logs, Retained for the duration of your account unless you delete them. Deleted within 30 days of request.
- Payment records, Retained as required by tax and financial regulations (typically 7 years).
7. Cookies & Tracking
We use the following categories of cookies:
- Essential cookies, Required for authentication, security, and core functionality. Cannot be disabled.
- Analytics cookies, Help us understand how you use the Services. We use privacy-focused analytics and do not share this data with third-party ad networks.
- Preference cookies, Remember your settings and choices across sessions.
We do not use third-party advertising cookies or cross-site tracking pixels. You can manage cookie preferences through your browser settings.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access, Request a copy of the personal data we hold about you.
- Correction, Request that we correct inaccurate or incomplete data.
- Deletion, Request that we delete your personal data, subject to legal retention requirements.
- Portability, Request your data in a structured, machine-readable format.
- Objection, Object to processing based on legitimate interests.
- Withdraw consent, Where processing is based on consent, you may withdraw at any time.
To exercise any of these rights, contact us at will@provenlabs.ai. We will respond within 30 days.
9. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS 1.2+) and at rest
- Access controls and authentication requirements for internal systems
- Regular security assessments and dependency auditing
- Incident response procedures for data breach notification
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
10. International Data Transfers
Your data may be processed in the United States or other jurisdictions where our service providers operate. By using the Services, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your own. We ensure appropriate safeguards are in place for any such transfers.
11. Children's Privacy
The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 30 days before they take effect. The "Effective Date" at the top of this page reflects the latest revision.
13. Contact
For privacy-related inquiries, data requests, or concerns:
ProvenLabs
Email: will@provenlabs.ai