Privacy Policy

1. Who We Are

VowProof LLC (“we,” “us,” or “our”) operates VowProof, a project management platform for wedding stationers. This policy explains how we collect, use, and protect your information when you use our website at vowproof.com and our application.

2. Information We Collect

We collect information in the following ways:

• Account information: When you sign up, we collect your name, email address, and business name.
• Project data: Information you enter about your projects, clients, guest lists, invoices, proposals, and proofs.
• Payment information: Subscription payment processing is handled by Stripe. We do not store your credit card details directly. If you connect a Stripe account via Stripe Connect, client payments (invoices, proposals, consultation fees) are processed directly to your connected Stripe account. VowProof does not hold or take a portion of those funds.
• Google account data: If you connect your Google account, we access your Google Calendar events and/or Gmail messages to display them within VowProof. We store OAuth tokens securely to maintain the connection.
• Connected store order data (Shopify, WooCommerce, Etsy): If you connect an e-commerce store, we import paid orders so they become projects in VowProof. This may include the buyer's name, the order's shipping address and phone number, item and personalization details, and — only when the platform provides it — the buyer's email address. For Etsy specifically, we act as a service provider to you, the seller, and process this buyer information solely to fulfill the order-management features you use; Etsy keeps buyer email addresses private unless separately approved, so Etsy orders typically import without an email. We store OAuth tokens and store credentials in encrypted form.
• Usage data: We collect basic analytics about how you use the application to improve the product.
• Referral tracking (only if you arrive via an affiliate link): When a visitor lands on vowproof.com through an affiliate's referral URL (e.g., vowproof.com/?via=partner-name), our affiliate tracking provider Rewardful places a first-party cookie in the browser that expires after 60 days. The cookie stores only the affiliate's referral token — no personal information. If the visitor subsequently signs up for a paid subscription within that window, Rewardful uses the cookie to attribute the referral and pay the affiliate a commission. If you do not arrive via an affiliate link, no such cookie is set.

3. How We Use Google Data

When you connect Google services, VowProof only accesses the data needed to provide inbox and calendar functionality.

Gmail (optional)

• Scopes requested: https://www.googleapis.com/auth/gmail.readonly, https://www.googleapis.com/auth/gmail.send, and https://www.googleapis.com/auth/userinfo.email.
• Data stored in VowProof: email subjects, message bodies (text and HTML), timestamps, sender and recipient addresses, thread IDs, read status, and snippets.
• Attachment handling: attachment file contents are not stored in VowProof inbox history.
• Read-only contract: VowProof does not modify your Gmail mailbox. We never trash, archive in Gmail, change labels, or alter messages on your behalf. Archive actions in VowProof affect only the VowProof inbox view; your Gmail mailbox is unchanged.
• Purposes: display client conversations in the VowProof inbox, compose and send replies, display your custom Gmail labels alongside threads for in-app filtering, and link email conversations to projects. Built-in system labels (such as Inbox, Sent, Trash, Spam, and Categories) are not surfaced as filters in VowProof — they are read for sync state only.

Google Calendar (optional)

• We read your calendar events to display them alongside project deadlines.
• We can create events for consultations, proof deadlines, and project dates.
• You control which calendars are synced.

Google API Services User Data Policy (Limited Use)

• VowProof's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
• Google user data is not used for advertising, user profiling, or machine learning / AI model training.
• Google user data is not shared with third parties except the subprocessors listed in Section 7.
• Google user data is retained only as needed to provide email and calendar management features in VowProof.

Microsoft 365 Email (optional)

• Scopes requested: Mail.ReadWrite, Mail.Send, User.Read, and offline_access (to maintain the connection without requiring you to re-authenticate).
• Data stored in VowProof: email subjects, message bodies (text and HTML), timestamps, sender and recipient addresses, thread IDs, read status, and snippets.
• Purposes: display client conversations in the VowProof inbox, compose and reply to emails, archive/trash threads, and link email conversations to projects.
• Limited-use commitment: Microsoft email data is not used for advertising, profiling, or AI model training and is retained only to provide inbox functionality.

4. How We Use Your Information

• To provide and maintain the VowProof service
• To process payments through Stripe
• To send you service-related emails (account verification, proof reminders, payment receipts)
• To improve our product based on usage patterns
• To respond to your support requests

5. Data Storage & Security

Your data is stored securely using Supabase (built on PostgreSQL) with row-level security policies. Files are stored in encrypted cloud storage. All connections use HTTPS encryption. We follow industry-standard security practices to protect your information.

Email data retention: synced email content is retained while your account is active. If you disconnect Gmail or Microsoft 365, associated OAuth tokens are deleted from active use immediately, but previously synced email history may remain in project records for continuity. You can request full deletion of stored email history by contacting support@vowproof.com.

Connected store data retention: order and buyer information imported from a connected store (Shopify, WooCommerce, or Etsy) is retained as part of the project it created so you can fulfill and reference the order. If you disconnect a store, its access tokens are deactivated immediately, but already-imported orders remain in your projects unless you delete them. You can delete an individual project at any time, or request full deletion of imported order data by contacting support@vowproof.com.

6. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing
• Supabase: For data storage and authentication
• Vercel: For application hosting
• Google: Only when you explicitly connect your Google account
• Microsoft: Only when you explicitly connect your Microsoft 365 email
• Resend: For transactional email delivery on your behalf
• Rewardful: For affiliate program tracking and commission attribution, only when a visitor arrives via an affiliate referral link
• Shopify / WooCommerce / Etsy: Only when you explicitly connect your store for order syncing
• Zapier: Only when you set up a Zapier integration for order import

7. Subprocessors

We use the following third-party services to operate VowProof. Each processes data only as needed to provide its service.

8. Your Rights

You can request to view, update, or delete your personal data at any time by contacting us. You can also revoke connected inbox and calendar permissions at any time.

1. In VowProof, go to Settings and disconnect your Google and/or Microsoft connection.
2. In Google, review and revoke app access at https://myaccount.google.com/permissions.
3. In Microsoft, review and revoke app access at https://account.live.com/consent/Manage.
4. Revoking access stops future sync and send operations but does not automatically delete previously synced emails already stored in VowProof.

9. Cookies

We use essential cookies to keep you logged in and maintain your session. If you arrive at vowproof.com via an affiliate referral link, we also set a first-party referral attribution cookie via Rewardful (60-day expiration, stores only the affiliate's referral token, no personal information) — see Sections 2, 6, and 7 above for details. We do not use third-party advertising cookies and do not sell cookie-derived data to advertisers.

10. Business Transfers

If VowProof LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice in the application before your information becomes subject to a different privacy policy.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through the application.

12. Contact Us

If you have questions about this privacy policy, please contact us at support@vowproof.com.