How Provv handles your data.

Who is the data controller

Provv is operated by StackedGTM LLC, a Delaware limited liability company. StackedGTM LLC is the data controller for personal data processed in connection with your Provv account and use of the service.

What we collect and why

When you create an account we store your email and login credentials to identify you and provide the service (contract performance). When you run a panel we store the prompt, the copy you submitted, and the reactions so you can come back to them (contract performance). We collect basic usage telemetry, device and IP information for security, fraud prevention, and product improvement (legitimate interests). We process support messages to respond to you (legitimate interests). With your consent, we may send product updates by email; you can opt out at any time. We do not sell your data.

What we read in public

Provv reads public language about a market: reviews, forum threads, comparison content, podcast transcripts, and public discussion. We do not read private accounts, private channels, or personal data.

Who we share data with

We share personal data with a small set of recipients only as needed to run the service:

• Service providers and subprocessors who host the database, run analytics, and power AI inference under written agreements.
• Stripe, our payment provider, for the sale of subscriptions, billing, payments, tax compliance, invoicing, and refund handling. Stripe's privacy notice is at stripe.com/privacy.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Where data is stored

Account and panel data are stored on managed cloud infrastructure inside an encrypted database. Backups are encrypted at rest. Transit is encrypted with TLS. We apply appropriate technical and organisational measures, including access controls and encryption, to protect personal data.

Retention

We keep account and panel data for as long as your account is active. If you close your account we delete or anonymise personal data within ninety days, except where we must keep records for legal, tax, or fraud-prevention reasons. Billing records held by Stripe are retained per Stripe's policy.

International transfers

We may transfer personal data outside your country, including to the United States. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms with our providers.

Cookies and analytics

We use a small number of first-party cookies to keep you signed in. We use lightweight, privacy-respecting analytics to measure traffic in aggregate. We do not run advertising trackers.

Your rights

You can request access to, correction of, or deletion of your personal data, restrict or object to processing, withdraw consent, and request portability. UK and EEA users have these rights under GDPR, including the right to complain to a supervisory authority. Email hello@provv.ai and we will respond within thirty days.

Children

Provv is built for marketers at work. It is not intended for use by children under sixteen.

Changes

We will update this page when the practices change and note the date above. Substantive changes will be flagged in product.

Contact

Questions on privacy go to hello@provv.ai.