Privacy Policy
Last updated: March 10, 2026
proofnest ("we," "us," or "our") is operated by Hofmax Solutions Limited, a company registered in England and Wales (Company No. 16919266), with its registered office at Office Suite 29A 3/F, 23 Wharf Street, London, United Kingdom, SE8 3GG. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Data Governance
Data We Collect
- Account data: email, name (until account deletion + 30 days)
- Report inputs: idea descriptions, market selections (until account deletion + 30 days)
- Report outputs: generated reports and metadata (until account deletion + 30 days)
- Payment data: processed by third-party payment processor, we don't store card details (7 years, legal requirement)
- Usage data: pages visited, features used (12 months rolling)
- Technical data: browser, device, IP address (90 days)
Anonymized Knowledge Base
After each report, we extract anonymized market data (competitor names, market sizes, demand signals) into an internal knowledge base. Your account information, idea descriptions, and product names are never included. This data improves report quality for all users.
Your Rights
- Access: view all your data in your dashboard
- Export: download reports as PDF
- Deletion: delete account from Settings (30-day processing period)
- Correction: contact [email protected]
Data Processing
Your report inputs are sent to our AI processing pipeline on secure servers. Inputs are not stored by third-party AI providers beyond the API call duration. We do not sell, rent, or trade your personal data. We do not use your data for targeted advertising.
1. Information We Collect
Information You Provide
- Account information: name, email address, password when you create an account
- Payment information: billing details processed securely through Stripe. We do not store credit card numbers on our servers.
- Research inputs: ideas, market descriptions, and other data you submit for report generation
- Communications: messages you send to our support team
Information Collected Automatically
- Usage data: pages visited, features used, report types generated, timestamps
- Device information: browser type, operating system, IP address, device identifiers
- Cookies and tracking: see our Cookie Policy for details
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Generate market research reports based on your inputs
- Process payments and manage subscriptions
- Send transactional emails (report ready, payment confirmations, renewal reminders)
- Analyze usage patterns to improve product quality
- Detect and prevent fraud or abuse
- Comply with legal obligations
3. Market Research Data & Knowledge Base
Your Ideas Stay Yours
You retain full ownership of the ideas, hypotheses, and business concepts you submit for research. We will never share, sell, or expose your specific ideas to other users or third parties.
Anonymized, Aggregated Market Data
After each report is generated, we extract anonymized, aggregated market data — such as competitor information, market trends, and demand signals — into our internal knowledge base. This data:
- Is stripped of any identifying information about your specific idea
- Contains only publicly available market information (competitor names, pricing, review data)
- Is used to improve the quality and speed of future reports across all users
- Is never sold to third parties
This practice is similar to how search engines improve results based on aggregate query patterns without exposing individual searches.
4. Third-Party Services
We use the following third-party services to operate our platform:
| Category | Purpose | Data Shared |
|---|---|---|
| Cloud infrastructure | Website hosting, database, authentication | Account data, report data |
| Payment processing | Secure payment handling | Billing information |
| AI providers | Analysis and report generation | Research queries (anonymized) |
| Data providers | Market research, search data, reviews | Market research queries (anonymized) |
We use industry-standard third-party services for infrastructure, payments, AI analysis, and data collection. Each service is selected for reliability and compliance with data protection standards. Specific service providers may change as we improve our platform.
5. Data Retention
- Account data: retained as long as your account is active. Deleted within 30 days of account deletion request.
- Reports: retained as long as your account is active. You can delete individual reports at any time.
- Payment records: retained for 7 years for tax and legal compliance.
- Usage analytics: retained in aggregated form indefinitely.
- Knowledge base data: anonymized market data is retained indefinitely as it contains no personal information.
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for database storage
- Row-level security policies on all database tables
- Secure authentication with hashed passwords
- Regular security audits
No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data
- Export your data in a portable format
- Object to processing of your personal data
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at [email protected].
For EU/EEA Residents (GDPR)
Our legal basis for processing personal data is:
- Contract performance: to provide you with our services
- Legitimate interest: to improve our services, prevent fraud
- Consent: for optional marketing communications
For California Residents (CCPA)
We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale of personal information.
8. Children's Privacy
Our service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of the service after changes constitutes acceptance.
11. Contact Us
For questions about this Privacy Policy:
Email: [email protected]
Website: https://proofnest.ai/contact
© 2026 proofnest. All rights reserved.