How Prove the Market handles information

This policy explains the information used to create, deliver and support a report. Send questions or verified privacy requests to support@provethemarket.com.

Effective September 21, 2026

Who operates the service

Prove the Market is a sole proprietorship operating under a certified assumed business name filed in Suffolk County, New York. Prove the Market is the customer-facing business responsible for this policy.

Information you provide

We process the business idea or type, ZIP code or other market information, delivery model and answers you submit. If you analyze an idea found online, we may process an online content creator link, pasted text, transcript or uploaded media when that feature is enabled. Do not submit confidential material or sensitive personal information.

Paid-report support may use your checkout email, report reference and correspondence. Customer-entered Actual and Estimated scenario values are used for the requested calculation and remain session-only; a refresh returns to the saved report.

Information created by the service

We create reports, structured claims, market and competitor snapshots, source records, confidence assessments, economics evidence, report history and privacy-reduced operational events. Historical evidence and model context help keep saved findings explainable rather than silently changing later.

Creator links, transcripts and uploaded media

Links, transcripts and pasted material may be retained with a report for reproducibility, support or audit purposes. Production video upload is currently disabled. When enabled, original uploaded media is stored privately for no more than 24 hours and may be deleted sooner after processing. Audio may be sent to OpenAI for transcription, and the transcript may be processed for claim extraction. Temporary processing audio is removed from the processing server.

Report access and recovery

A private HttpOnly browser cookie can grant access to reports saved in that browser. Clearing cookies or changing devices can remove access. For a verified paid purchase, Support can send a private, report-specific, single-use recovery link to the checkout email. The link expires after 24 hours.

Payments

Stripe processes card information. Prove the Market does not receive or store your full card number. We retain checkout email, payment and session references, amount, currency, status, report entitlement and refund or support audit information needed to deliver and support a purchase and meet applicable recordkeeping obligations.

Email and support

Resend may deliver report and recovery emails. The application records bounded delivery-attempt status without placing the recovery secret or full email body in operational logs. Support correspondence is handled through the monitored support mailbox.

Service providers

Depending on the feature used, information may be processed by Vercel for hosting, Supabase for private data storage, Stripe for payments, Resend for email, DataForSEO for market evidence, U.S. Census APIs for demographics, OpenAI for enabled transcription or structured extraction, and Google for AdSense verification and approved privacy messaging. Providers may retain security, transaction and abuse-prevention records under their own policies.

Advertising and Google privacy messaging

Prove the Market has configured Google AdSense ownership verification and publishes an ads.txt record. The site loads Google’s AdSense verification script, which sends a request to Google. The site is under Google review. European Google consent messaging and a U.S. state privacy message targeting currently supported states are configured.

Auto ads and live ad slots are disabled. Prove the Market does not currently display live advertising. If enabled later, third-party ads may appear only on eligible free or informational pages. Paid reports remain ad-free. Advertising does not affect scoring, recommendations, rankings, economics or conclusions.

How information is used

• Create, deliver and recover reports.
• Verify payments and report access.
• Respond to support, refund, correction and deletion requests.
• Protect the service from fraud, abuse and excessive use.
• Maintain evidence history, reliability and operational records.
• Meet applicable legal, accounting and security obligations.

Analytics

We use privacy-conscious site analytics to understand site usage, traffic sources, product engagement and conversion behavior. This may include page paths, approximate country, device or browser type, referring site and campaign parameters. We do not intentionally send report identifiers, email addresses, payment-card information, recovery tokens or submitted creator content to analytics providers. Google Analytics loads only when configured and uses the existing Google consent controls where consent is required.

Retention

Our intended retention schedule is:

• Reports, market evidence and research snapshots: 24 months after report creation.
• Creator links, transcripts and extracted source material: up to 24 months when retained for report reproducibility, support or audit.
• Support communications: 24 months.
• Application and operational logs: 90 days, unless longer retention is reasonably required for a security investigation or operational need.
• Report recovery links: 24 hours.
• Actual and Estimated scenario changes: session-only.
• Original uploaded media, when enabled: no more than 24 hours and deleted sooner when processing permits.
• Payment, refund, tax, financial and necessary audit records: up to 7 years, or longer when reasonably required by law, accounting or payment-provider obligations, disputes, fraud prevention, security investigations or legal claims.

Some short-lived controls are enforced automatically. Broader report, support, log and financial schedules currently rely on documented operational review where automated lifecycle deletion is not yet implemented. Records subject to an exception may be retained longer. Immutable audit history is not silently rewritten.

Deletion and privacy requests

Send a deletion request to support@provethemarket.com. We target completion of a verified request within 30 days and may reasonably verify that you control the relevant report or checkout mailbox. Do not send government identification unless Support explains why it is legally necessary; routine requests should not require it.

Deletion may exclude or be delayed for records reasonably required for tax or accounting, payments or refunds, fraud prevention, security investigations, legal claims, compliance obligations or necessary immutable audit history. We will not grant access to another customer’s report merely because an email address is supplied.

Security

We use server-side credentials, private report grants, restricted database roles, signed provider requests, rate limits and private media storage where applicable. No online service can guarantee perfect security. Never send card numbers, passwords, API keys, government identification or other sensitive credentials to Support.

Changes and contact

This policy may change as the service, providers or applicable requirements change. Email support@provethemarket.com or see Support for report and privacy help.