Privacy Policy

Proofzi builds and hosts done-for-you mobile Proof Pages for independent contractors and local businesses. Proofzi is operated by its owner as a sole proprietorship. This is a business-to-business service: our clients are businesses, and each client's Proof Page is shown to that business's own visitors.

This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. It applies to our own website, the operator tools our staff and clients sign in to, and every Proof Page we host.

Proofzi is a multi-tenant platform. Each client's Proof Page is separate from every other client's page, and information submitted on one page is never shown to another business.

If you are a client, we process the materials you give us in order to build, host, and update your page. If you are a visitor who submits an estimate or contact form on a client's Proof Page, your inquiry is delivered to that business, and to our operations team when we are handling inquiries on that business's behalf. We are not a lead marketplace: inquiries are never sold, resold, or routed to other businesses.

We collect only what is needed to build and run Proof Pages:

• Client intake materials: photos, logos, business descriptions, service lists, reviews you choose to share, links and URLs, service areas, and the contact details you want shown on your page.
• Visitor estimate and contact forms: name, phone number or email address, the message you write, and the page the form was sent from.
• Staff and client accounts: email address, a hashed password, role, and sign-in activity needed to keep accounts secure.
• Media: uploaded photos and files are stored in private cloud object storage (Cloudflare R2). Only the versions approved for a published page are served publicly.
• Spam protection: when a form uses Cloudflare Turnstile, Turnstile checks the request and may process a verification token and your IP address. Forms without Turnstile use a hidden honeypot field instead.
• Basic technical logs: IP address, browser type, requested page, and time, kept for security and troubleshooting. Private intake links are redacted from our application logs.

We use the information above to:

• Build, host, update, and publish each client's Proof Page.
• Deliver estimate and contact inquiries to the business whose page received them.
• Provide customer support and communicate with clients about their order.
• Detect spam and abuse and keep the service secure.
• Meet legal, accounting, and record-keeping obligations.

We share information only with service providers that help us run the service, each under agreements that limit how they may use it: hosting and infrastructure, our database provider, object storage for media, our transactional email provider for inquiry and order notifications, and Cloudflare Turnstile where enabled.

Each client business receives the inquiries submitted on its own Proof Page. We may also disclose information when required by law, to protect the rights and safety of our users, or as part of a business transfer, in which case this policy continues to apply.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not offer SMS marketing, CRM, or missed-call automation, and we do not collect phone numbers for text-message campaigns.

Public Proof Pages do not use advertising pixels or third-party analytics trackers. A session cookie is used only for signed-in staff and client accounts in the operator area. Where Cloudflare Turnstile is enabled on a form, Turnstile may set its own cookie to verify that request.

If we adopt any analytics tool in the future, we will update this policy before it goes live.

Client materials and pages are kept while the client's service is active and for a reasonable period after cancellation so a page can be restored on request, after which they are deleted or anonymized. Visitor inquiries are kept for as long as the receiving business needs them and for support purposes. Technical logs are kept for a short period. We may retain records we are legally required to keep.

Information is encrypted in transit, media is stored in private object storage, each client's data is isolated by access control, and staff access is limited to what their role needs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The service is intended for businesses and for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, contact us and we will delete it.

You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. We will verify your identity before responding and will not treat you differently for exercising these rights.

California residents have these rights under California law. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of by default. If you submitted an inquiry on a client's Proof Page, you may also contact that business directly, and we will assist it in responding.

To make a request, contact us at nestor.cruz.corp@gmail.com.

We may update this policy from time to time. The date at the top of this page shows when it was last changed, and material changes will be posted here before they take effect.