Privacy Policy

CasePruve is operated by [Your legal name or company], [Street, City, Country]. We are the data controller for the personal data described here. You can reach us at privacy@casepruve.com.

• Account data — email address and, if you use social sign-in, your name and profile email from Google.
• Content you create — collection links, testimonials received, case studies and generated posts.
• Testimonial data from your clients — the name, optional email, text and optional video they choose to submit.
• Billing data — handled by Stripe. We store only your plan, subscription status and customer reference; we never see or store card numbers.
• Technical data — minimal server logs needed to keep the service secure and running.

We do not run advertising or analytics trackers, and we do not sell or share personal data with advertisers.

• To provide the service (accounts, links, testimonials, AI generation) — performance of a contract, Art. 6(1)(b) GDPR.
• To take payment — performance of a contract, Art. 6(1)(b) GDPR.
• To keep the service secure and prevent abuse — legitimate interests, Art. 6(1)(f) GDPR.
• To send service emails (sign-in, password reset, billing) — contract and legal obligation.
• Marketing emails, if we ever send them — only with your consent, Art. 6(1)(a) GDPR, withdrawable at any time.

When you collect testimonials, you decide who to ask and what to publish. For that content you act as the controller and CasePruve acts as your processor, handling the data only on your instructions. You are responsible for telling your clients how their testimonial will be used and for having a valid basis (normally their consent) to publish it.

People who submit a testimonial can ask us or you to correct or delete it at any time by writing to privacy@casepruve.com.

Case studies and social posts are generated by sending the approved testimonial text to an AI provider through our hosting platform. The content is processed only to produce your output. We do not use your content to train AI models, and generated drafts are always yours to edit or delete before publishing.

Where data leaves the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account and content data: while your account is active.
• After you delete your account: erased within 30 days, except backups that expire on their own cycle.
• Anonymous collection links created on the landing page and never claimed: deleted automatically after 7 days.
• Invoices and billing records: kept as long as tax law requires.

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time without affecting past processing.

Email privacy@casepruve.com and we will answer within one month. You can also delete your account and its data yourself from Settings. If you are unhappy with our response, you may complain to your local supervisory authority — for us that is the Comissão Nacional de Proteção de Dados (CNPD), Portugal.

We only use strictly necessary cookies and local storage: keeping you signed in, remembering your sidebar state, and holding an unclaimed collection link until you create an account. These are exempt from consent under the ePrivacy Directive, so there is no cookie banner. If we ever add analytics or marketing cookies, we will ask for your consent first.

Data is encrypted in transit, access to your workspace is enforced at the database level with row-level security, and payment details never touch our servers. No system is perfectly secure, but if a breach affects your rights we will notify you and the supervisory authority as required.

CasePruve is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

We may update this policy as the product evolves. Material changes will be announced by email or in the app before they take effect.