GDPR

Your data, your rights

ProofCap is committed to compliance with the EU General Data Protection Regulation (GDPR) and equivalent data protection laws. This page summarizes your rights and how to exercise them.

Legal Basis for Processing

Why we process your data

Contractual necessity. We process account, billing, and integration data because it's necessary to provide the ProofCap service you've signed up for — including running forensic audits and generating reports.

Legitimate interest. We process limited usage data to maintain security, prevent fraud, and improve the reliability of the platform.

Consent. Where we send marketing communications or connect optional third-party integrations (e.g. Stripe, Google Analytics), we rely on your explicit consent, which you can withdraw at any time.

Data Subject Rights

What you can ask of us

Right to access

You can request a copy of the personal data we hold about you, including account details and audit history.

Right to rectification

You can update or correct inaccurate personal data directly from your account settings, or by contacting us.

Right to erasure

You can request that we delete your account and associated personal data, subject to legal retention requirements.

Right to data portability

You can request an export of your data in a structured, machine-readable format.

Right to restrict or object to processing

You can ask us to limit how we use your data, or object to processing based on legitimate interest.

Right to withdraw consent

Where processing is based on consent (e.g. marketing emails), you can withdraw it at any time.

Requesting a data export

Email us with the subject “Data Export Request” from the email address associated with your account. We will verify your identity and provide an export of your account data within 30 days.

Requesting deletion

Email us with the subject “Account Deletion Request”. We will delete your account and associated personal data, except where retention is required for legal, tax, or fraud-prevention purposes.

Data Processing Agreement

Need a DPA or have questions?

If your organization requires a signed Data Processing Agreement (DPA), or you have any other questions about how ProofCap handles personal data, reach out and we'll get back to you.

Contact Us