Privacy policy

Who we are

PROVEAiBLE is operated by Eight LLC, a company incorporated in Kosovo, which is the data controller for your personal data. Contact: support@proveaible.com.

The short version

• We hold your email, your first name, the case you build, and the records needed to run the service (purchases, usage, sign-in and security logs). None of those records contain text from your case.
• Your case is stored encrypted, with a key for each person.
• Before the language model reads your papers, names, addresses, email addresses, phone and ID numbers are replaced with tags, and you check them first.
• The language model providers are set not to keep or train on your text.
• We don’t sell your data, show you ads, or use your case to train anything.
• You can delete a paper, a case, or your whole account at any time.

What we collect

• Your account: your email address and first name. You sign in with a link we email you; there is no password.
• Your case: the papers you add and everything made from them: what was read from each page, facts, timeline, answers, drafts, the laws fetched for your case, and your conversation with it.
• Purchases: from Freemius we receive your email, what you bought and when. We never see your card details.
• Usage records: for each piece of work we log which service did it, how much it used and what it cost. These records contain no text from your case.
• Technical data: a session cookie to keep you signed in, and server logs. Our logs do not contain your papers or what’s in them.

How we use it

Only to provide PROVEAiBLE to you: to read and organise your case, take payment, answer your emails, and keep the service secure. Our legal basis is performing our contract with you. For security and fraud prevention, it is our legitimate interest in keeping the service safe.

Sensitive information in your papers

Papers about family, housing and work often hold sensitive information: about your health, your children, your relationships and money, and allegations of crime. That can be about you and about other people named in your papers.

We process it only to provide PROVEAiBLE to you. For your own sensitive information, we rely on your explicit consent, which you give with a tick when you add your first paper; we record when, and the wording you agreed to. For information about other people in your papers, we rely on it being necessary for you to establish, exercise or defend a legal claim. You can withdraw your consent at any time by deleting the paper, the case or your account.

For family cases in England and Wales, Australia and Ireland, the app also shows a short note when you add your first paper: some court papers have rules about who may see them. PROVEAiBLE processes them only for you and never shares them; check the rules for your court.

How your papers are processed

• Reading the page. PDFs with text in them and Word files are read on our own server. Photos and scans are sent to Google Cloud Vision, on its EU endpoint, to be turned into text. It has to see the page as it is, before any names are hidden. It receives the image only, and Google does not use it to train its models.
• Hiding who you are. Names are replaced with role tags such as [CLIENT] and [OTHER_PARTY]. Addresses, email addresses, phone and ID numbers are replaced with tags too. This works by pattern, so it can miss something written in an unusual way. That’s why every page is shown to you to check first, and why you can add any word to always hide.
• Reading and drafting. Only then do the language models read the tagged text. They set out facts, find where papers disagree, answer your questions and draft documents. The providers are set not to keep or train on it.
• Finding the law. To fetch a law’s text we send only its name and country to a search service, or fetch it from public official sites directly.
• No automated decisions. Nothing PROVEAiBLE does makes a decision about you with legal or similarly significant effect. It organises your papers and drafts text for you to check.

Who else handles your data

We use these service providers (“sub-processors”), each only for the purpose shown:

We never sell your data, and we don’t share it with anyone else unless the law requires us to.

Where it is stored, and transfers

Your case is stored on our server in the European Union. Some providers above are outside the EU, mainly in the USA. Google Cloud Vision is called on its EU endpoint, so your page images stay in the EU; our terms with Google are its Cloud Data Processing Addendum, which provides Standard Contractual Clauses or another recognised transfer safeguard if data ever leaves the EU. For the other providers, where your data goes to them, we rely on the transfer safeguards in each provider’s terms, such as the EU Standard Contractual Clauses.

How long we keep it

• Your account and case: until you delete them. You can delete a single paper, a whole case, or your account at any time.
• Backups: encrypted nightly copies, the last 14 kept. Deleted data is gone from our backups within 14 days, and we never restore it in the meantime.
• Purchase records: Freemius keeps these as tax law requires.
• Laws: the public legal texts fetched for any case are kept in a shared library. They are public documents, not your data, and contain nothing of yours.
• Inactive accounts: if you haven’t signed in for 18 months, we email you. If you still haven’t signed in at 24 months, we delete the account and everything in it.

How we keep it safe

• Your case is encrypted at rest (AES-256-GCM), with a separate key for each person. Those keys are protected by a master key held on a separate key host, never beside your data.
• Support can’t open your case, and every access to it is logged: who, and why.
• Our server logs never contain your papers or what’s in them.
• To be clear about the limit: PROVEAiBLE is not end-to-end encrypted. Our server has to read your papers in order to do the work for you.

Your rights

Wherever you live, you can ask us to:

• see the data we hold about you;
• correct it (most of it you can correct yourself in the app);
• delete it (you can delete papers, cases and your account yourself);
• give you your case in a portable form. Each case can be exported as a file, redacted by default or with the names;
• stop or restrict processing, or object to it.

Email support@proveaible.com and we reply within 2 working days — usually the same day. We complete your request within one month, as the law requires. Where we rely on your consent, you can withdraw it at any time. We need your email to run your account. In the UK you can complain to the ICO (ico.org.uk); in the EU, to the data protection authority where you live.

The website and early access

• Early access sign-ups. If you join early access we keep your email, first name if you give it, what your case is about (a category, never details), your country, how you heard of us, the page you signed up on and any campaign tags in the link, and the wording of what you agreed to and when. We send one email to confirm your address, then only news about early access and the opening. Our legal basis is your consent, which you can withdraw with the unsubscribe link in every email. We keep a sign-up until you unsubscribe or ask us to delete it.
• Stopping abuse. To stop automated sign-ups we keep a scrambled (hashed) form of your IP address for a short time, never the address itself.
• Where it is kept. Sign-ups are stored with Supabase (EU, Ireland), and our emails are sent by Resend (EU, Ireland).
• The free tools (redactor, bundle maker, chat transcript and the others) run entirely in your browser. Your files are never uploaded to us. The redactor downloads a text-recognition program to your browser the first time it reads a photo or scan; your document stays on your device.

Cookies

The PROVEAiBLE app sets one cookie: a secure session cookie that keeps you signed in. It also stores your display preferences, such as theme and pane sizes, in your browser. There are no tracking or advertising cookies in the app.

The proveaible.com website uses Google Analytics to see which pages help people, but only if you press Accept on the cookie banner. Until then nothing from Google loads. If you accept, Google Analytics sets cookies (named _ga and _ga_…) that last up to two years; we don’t use them for advertising, and IP addresses are anonymised. Your choice is remembered in your browser for a year, and you can change it at any time with “Cookie settings” at the bottom of every page. Google processes this data in the USA and elsewhere.

Age

PROVEAiBLE is for people aged 18 and over. You confirm this when you sign up.

Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.

Contact

Eight LLC, Kosovo · support@proveaible.com