Privacy Policy

1. Who We Are

VowProof LLC (“we,” “us,” or “our”) operates VowProof, a project management platform for wedding stationers. This policy explains how we collect, use, and protect your information when you use our website at vowproof.com and our application.

2. Information We Collect

We collect information in the following ways:

• Account information: When you sign up, we collect your name, email address, and business name.
• Project data: Information you enter about your projects, clients, guest lists, invoices, proposals, and proofs.
• Payment information: Payment processing is handled by Stripe. We do not store your credit card details directly.
• Google account data: If you connect your Google account, we access your Google Calendar events and/or Gmail messages to display them within VowProof. We store OAuth tokens securely to maintain the connection.
• Usage data: We collect basic analytics about how you use the application to improve the product.

3. How We Use Google Data

When you connect Google services, VowProof only accesses the data needed to provide inbox and calendar functionality.

Gmail (optional)

• Scopes requested: https://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/gmail.send, and https://www.googleapis.com/auth/userinfo.email.
• Data stored in VowProof: email subjects, message bodies (text and HTML), timestamps, sender and recipient addresses, thread IDs, read status, and snippets.
• Attachment handling: attachment file contents are not stored in VowProof inbox history.
• Purposes: display client conversations in the VowProof inbox, compose and reply to emails, archive/trash threads, and link email conversations to projects.

Google Calendar (optional)

• We read your calendar events to display them alongside project deadlines.
• We can create events for consultations, proof deadlines, and project dates.
• You control which calendars are synced.

Google API Services User Data Policy (Limited Use)

• VowProof's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Google user data is not used for advertising, user profiling, or machine learning / AI model training.
• Google user data is not shared with third parties except the subprocessors listed in Section 7.
• Google user data is retained only as needed to provide email and calendar management features in VowProof.

Microsoft 365 Email (optional)

• Scopes requested: Mail.ReadWrite, Mail.Send, and User.Read.
• Data stored in VowProof: email subjects, message bodies (text and HTML), timestamps, sender and recipient addresses, thread IDs, read status, and snippets.
• Purposes: display client conversations in the VowProof inbox, compose and reply to emails, archive/trash threads, and link email conversations to projects.
• Limited-use commitment: Microsoft email data is not used for advertising, profiling, or AI model training and is retained only to provide inbox functionality.

4. How We Use Your Information

• To provide and maintain the VowProof service
• To process payments through Stripe
• To send you service-related emails (account verification, proof reminders, payment receipts)
• To improve our product based on usage patterns
• To respond to your support requests

5. Data Storage & Security

Your data is stored securely using Supabase (built on PostgreSQL) with row-level security policies. Files are stored in encrypted cloud storage. All connections use HTTPS encryption. We follow industry-standard security practices to protect your information.

Email data retention: synced email content is retained while your account is active. If you disconnect Gmail or Microsoft 365, associated OAuth tokens are deleted from active use immediately, but previously synced email history may remain in project records for continuity. You can request full deletion of stored email history by contacting support@vowproof.com.

6. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing
• Supabase: For data storage and authentication
• Vercel: For application hosting
• Google: Only when you explicitly connect your Google account

7. Subprocessors

We use the following third-party services to operate VowProof. Each processes data only as needed to provide its service.

8. Your Rights

You can request to view, update, or delete your personal data at any time by contacting us. You can also revoke connected inbox and calendar permissions at any time.

1. In VowProof, go to Settings and disconnect your Google and/or Microsoft connection.
2. In Google, review and revoke app access at https://myaccount.google.com/permissions.
3. In Microsoft, review and revoke app access at https://account.live.com/consent/Manage.
4. Revoking access stops future sync and send operations but does not automatically delete previously synced emails already stored in VowProof.

9. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the application.

11. Contact Us

If you have questions about this privacy policy, please contact us at support@vowproof.com.