Who controls your information
Proofway is operated by SansaVision, a subdivision of Sansa Group AB. Sansa Group AB is the legal entity and data controller for Proofway unless a separate written agreement says otherwise. For privacy questions or requests, contact support@proofway.xyz. This notice applies to the Proofway website, product, support, and related services.
Information we collect
- Account information such as name, email, authentication records, sessions, and workspace membership.
- Project content such as ideas, public URLs, instructions, corrections, evidence decisions, exports, and integration approvals.
- Public evidence captured from URLs submitted by you or found during a requested analysis.
- Service data such as IP address, device and browser data, security events, usage, latency, model route, cost, and error logs.
- Billing identifiers and order status supplied by Stripe. Proofway does not store complete payment-card numbers.
- Support and privacy-rights correspondence.
Why we process it
| Purpose | Typical information | EEA/UK basis |
|---|---|---|
| Provide accounts, analyses, evidence ledgers, exports, and collaboration | Account and project content | Contract |
| Secure the service, prevent abuse, and investigate incidents | Sessions, IP, device, logs | Legitimate interests and legal obligations |
| Send authentication and service messages | Email and account state | Contract and legitimate interests |
| Fulfil purchases and keep accounting records | Billing identifiers and order state | Contract and legal obligations |
| Optional product analytics or marketing | Consent-controlled usage or campaign data | Consent where required |
AI and public-web processing
Proofway sends the minimum necessary project context and evidence to the model route chosen for the job. Lite tasks use Cloudflare-hosted GLM-5.3-Flash. Pro tasks use Qwen 3.8 Max through Cloudflare AI Gateway. Proofway does not route Pro work to a smaller Qwen fallback. Public page content is treated as untrusted data and cannot grant tools or change product policy.
Sharing and processors
We disclose information to service providers needed to run Proofway, including Cloudflare for compute, storage, email, security, AI routing and model inference, Stripe for Managed Payments, OxyBlink for requested search and browsing, and approved ecosystem integrations only when you initiate a handoff. Stripe or its designated affiliate acts as Merchant of Record for purchases and independently handles transaction support, applicable indirect tax, payment disputes, and transaction records. We do not sell personal information or share it for cross-context behavioral advertising.
Retention and deletion
Projects are private by default. Active project content remains until you delete it or the workspace retention setting removes it. Deleting a project removes relational records and queues associated R2 artifacts for deletion. Security and billing records may remain for a limited period where necessary for fraud prevention, disputes, tax, or legal obligations. Billing data held by the Merchant of Record is governed by its own legal retention duties. Backups expire on their normal rotation.
International transfers
Providers may process information outside your country. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, the UK Addendum, or another lawful mechanism, with supplementary security measures where appropriate.
Your choices and rights
Depending on location, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, opt-out of sale or sharing, or limits on sensitive-personal-information use. You may also complain to your data-protection authority. Submit a request through the data-rights center.
Security
We use tenant authorization, encryption in transit and at rest through platform capabilities, scoped credentials, private-by-default projects, short-lived artifact access, audit events, request limits, SSRF controls, and human approval for external actions. No online service can promise absolute security.
Children
Proofway is a business product not directed to children under 16. Contact support if you believe a child provided personal information.