Draft. This document is not legal advice. A lawyer must review it before launch.

1. Who we are

Proven Praise is a service of [Company legal name] ([ABN]), [address] ("Proven Praise", "we"). Contact us at [contact email].

This policy tells you what data Proven Praise collects, why we collect it, how long we keep it, and what rights you have.

2. Two roles

• Business account data. A business signs up to use Proven Praise. For the data of the business account, Proven Praise is the controller.
• Customer data. A customer of the business gets a request and can send a testimonial. For customer data, the business is the controller and Proven Praise is the processor. The data processing agreement applies. If you are a customer, the business that you paid decides how it uses your testimonial. Contact that business, or contact us.

3. Data we collect

From businesses

• The email address of the account owner, for sign-in and notices.
• The business name, a short name for public pages, the request delay and the request questions.
• The Stripe account ID and Stripe access tokens. We encrypt the tokens. Proven Praise has read-only access to customers and charges. Proven Praise never gets write access.
• Plan and billing status. Stripe processes the card. Proven Praise does not receive or keep card numbers.

About customers of a business

Proven Praise gets this data from the Stripe account of the business:

• Name and email address. We encrypt the email. We keep it only until the request flow ends (the customer sends a testimonial, the link expires, or the customer unsubscribes). Then we delete it.
• A keyed hash of the email. We keep it to make sure that a customer gets one request only. Nobody can read the email from the hash.
• Payment facts. The payment date, the currency and an amount band (for example $100-500). We keep the Stripe charge ID to prevent duplicates. The public record holds only a hash of it. We never collect the card number or keep the exact amount.

If the customer sends a testimonial, we also collect:

• The video or the text, the display name, an optional title and a rating.
• The transcript of the video and the AI selections (clip times and a quote).
• The consent choices: website, social media and ads, with the date and time.
• A signed verification record (see the docs).

Technical data

Our hosting providers keep standard server logs (for example IP address and browser type) for security. [Describe any analytics or cookies before launch. The current app uses only cookies that are necessary for sign-in.]

4. Why we use the data

• To give the service to the business: send requests, record and process testimonials, and show them on walls.
• To prove that a testimonial comes from a real paying customer.
• To send one request email and one reminder to a customer, for the business.
• To bill businesses and to apply plan limits.
• To keep the service secure and to prevent abuse.
• To obey the law.

We do not sell personal data. We do not use customer videos or transcripts to train AI models.

[Lawyer: confirm the legal bases for each purpose under each law that applies.]

5. Our rule for AI

The AI only selects and cuts. It never writes, changes or generates a customer's words, voice or face. Every caption and every quote comes from the transcript of the recording.

6. Emails to customers

• A customer gets one request email and, if they do not open the link, one reminder. No more emails after that.
• Every email has an unsubscribe link and our postal address.
• The request link works for 21 days.

7. Service providers (sub-processors)

We use these providers to run Proven Praise. Each provider gets only the data it needs for its task.

Some providers store or process data outside [country]. [Lawyer: list the regions and the transfer safeguards for each provider.]

8. How long we keep data

• Customer email: until the request flow ends, then deleted.
• Keyed email hash and payment facts: while the business account is active. [Confirm the period after the account closes.]
• Testimonials, videos, transcripts and verification records: until the customer withdraws, the business deletes them, or the business account closes. [Confirm the deletion period after the account closes.]
• The source download link for a video expires after 24 hours.
• Business account data: while the account is active, then [period].
• Billing records: as long as tax law requires.

9. Your rights

Customers

• You can withdraw your testimonial at any time. Use the "Remove my testimonial" link on the verification page. We send a link to the email that you paid with, so we know the testimonial is yours.
• When you withdraw, we delete the video, the clips, the quote card, the transcript, the text and the verification record. We remove the testimonial from all walls. We keep a short record that the testimonial was withdrawn, so it cannot go public again.
• You can unsubscribe from request emails with the link in each email.

Everyone

Depending on where you live, you can ask to access, correct, delete or export your data, or object to its use. Email [contact email]. If the request is about a testimonial, we also tell the business. You can complain to your privacy regulator (for example the Office of the Australian Information Commissioner, or the authority in your country).

10. Security

• We encrypt customer emails and Stripe tokens at rest.
• Each business can read only its own data. Database rules enforce this.
• Public pages never show a customer's email, card, exact amount or Stripe charge ID.

11. Children

Proven Praise is not for people under [age]. We do not knowingly collect data from children.

12. Changes

If we change this policy, we update the date at the top. If the change is important, we tell businesses by email.

13. Contact

[Company legal name], [address]. Email: [contact email].