Privacy

The short version

We collect as little as we can. We don't sell your information. If you use the check without an account, your answers stay in your browser. If you sign in, what you save stays private to your account.

Readiness check answers

Without an account, your answers, notes and dates are processed in your browser and we don't save them. If you're signed in, we keep a private working draft and any snapshots you choose to save, with the time our server recorded them. Snapshots can't be edited later. Only you can read them.

Optional contact form

After the check, you can choose to share your name, business name and email. If you tick the consent box and submit, we store:

• Your name, business name and email
• Your score and gap count, but not your individual answers
• What you agreed to and when

We use this only to contact you about your results and ProvenPolicies updates. We don't sell, rent or trade leads. We don't pass them to insurers, brokers or TRNSFRM. Right now we don't send automated emails. Ask us to delete your details at any time.

Broker referral links and sharing

If you arrive through a broker's link (/b/agency-name), we save the agency's link name in your browser's local storage for 30 days so the referral and the 20% partner discount follow you to the check, sign-in and pricing. You can remove it with the X on the referral notice. We also keep a random id in your browser so we can give the broker approximate visit and finished-check counts. Those counts never include who you are. If you create an account while a referral is saved, we privately note which broker referred you, so the discount applies automatically at checkout. Your signup remains count-only unless you affirmatively acknowledge the separate limited signup notice.

The limited signup notice lets your referring broker see your business name, signup date, plan or trial status and whether the 20% discount was confirmed at checkout. We record your explicit acknowledgment, notice version and server time. Existing clients without this notice remain count-only; we don't reveal their names or plan details retroactively. This is separate from readiness sharing and isn't required for referral discount eligibility. Attribution alone means eligible, not confirmed applied. No billing contacts, amounts, payment methods or billing identifiers are shown to brokers.

At the end of the check you can choose to share a summary with that broker. It's off unless you tick the box, and it's separate from our contact form. If you share, the broker sees your name, business name, email, score, gap count, up to five top missing controls and renewal date if you enter it. Never your answers, notes, evidence, staff records or policies. We record when you agreed and the consent version. Signed-in members can stop sharing from the dashboard. Without an account, you can withdraw from the same browser. Once stopped, the broker can't see it or turn it back on. Brokers' agency details are self-reported and not verified by us. We don't use third-party trackers and we don't email brokers or clients.

Accounts

If you create an account, we store your email, a securely hashed password, and any policy settings you save. Only you can read your saved settings. Email accounts aren't email verified.

Member records and evidence files

Members can save a renewal date and carrier name, evidence files with their details, policy review records, and staff acknowledgment records they type in. All of it is private to your account. Evidence files sit in private storage that only your account can read. They aren't public links, and we don't scan, read or act on what's inside them. Please redact passwords, secrets and personal data you don't need. Staff names and emails you enter are never contacted. Deleting an evidence file removes it, but saved snapshots keep its name and hash.

Generated documents

Policy drafts, renewal packets and incident-day records are built in your browser. The files go straight to your device. We don't keep copies.

Service providers

We use a hosting and database provider to run the site. Fonts load from Google Fonts. We don't use advertising trackers.

Changes

If this policy changes in a way that matters, we'll update this page and the date above.