Privacy Policy

What we collect

Three things, and nothing beyond them:

• Sign-in to the Provisa application. When you sign in with Google, GitHub, or Microsoft, we request only the scopes profile and email (Google), read:user and user:email (GitHub), or openid, email and profile (Microsoft), and the application reads your name and email address. If you sign in with an email address and password instead, we store that email address and a password managed by Firebase Authentication. We use this solely to create and authenticate your account and to know who is asking when a query runs. We never request access to your files, contacts, calendar, or any other data those providers hold.
• Product-update mailing list. If you submit the "Keep me posted" form on this site, we store the name and email address you enter, for the sole purpose of emailing you product updates.
• License registration. If you register for a license on this site, we store the email address, first and last name, company, position, role, optional phone number, and machine ID you enter, with the time of registration and of confirmation. We use them to send you a confirmation link and, once you confirm it, a signed license file that contains those same fields and the date of issue.

What we don't collect

No advertising trackers, no third-party analytics pixels, no cross-site tracking. We don't sell, rent, or share your data with any third party for their own marketing purposes.

Where it's stored

Sign-in identities are managed by Firebase Authentication (Google Cloud). Mailing-list entries and license registrations are stored in a private Cloudflare D1 database that only the Provisa operator can access. The confirmation email and the license email are sent through Resend, which receives the recipient's email address, first name and, in the license email, the license file. Firebase, Cloudflare and Resend process data under their own security and compliance commitments as our data sub-processors; none is authorized to use it for their own purposes.

How long we keep it

Sign-in data persists for as long as your account exists; delete your account and it is removed. Mailing-list entries and license registrations persist until you ask us to remove them (see Contact); the mailing-list address is de-duplicated so you're only ever stored once. A license confirmation link stops working after 48 hours.

Your choices

• Sign in with Google, GitHub, Microsoft or an email address and password, or self-host with your own auth if you're running Provisa on your own infrastructure.
• Ask us to access, correct, export, or delete your data — email us and we'll handle it directly, no ticket queue.

Contact

Questions about this policy, or a request to access, correct, or delete your data: [email protected]. General support: [email protected].