Privacy Policy

What we collect

• Account information: your email address and authentication details, handled by our auth provider, Supabase.
• Profile details: name, headline, location, and phone number, if you add them.
• The career evidence you create: Proof Records, job postings you analyze, requirements matrices, résumés, and other outputs. This is the material the product exists to hold. We store it so you can keep using it, not for any other purpose.
• Files you attach to a proof record, on plans that support attachments, and files you and a professional you work with share with each other.
• How you use the product: which days you signed in and which steps you took, such as saving an experience or reading a posting. Counts and dates, never what you wrote. Kept for twelve months, as below. If you use both the career and the business side, we also keep which one you used last, so that signing in opens it.
• What you paste before you have an account: on the “see what you can prove” walk, the text you paste is read by the structure of the page, not by a model, and held for 24 hours under a random key that only your browser and your sign-in link carry. If you create an account, it becomes your evidence; if you don’t, it is deleted when the 24 hours end. Nothing about it is read by AI until you ask, inside the account.
• What you tell the Business Intake before you have an account: on the business side of the site, your business’s name, its size, what it does, the month its fiscal year starts and what you want to fix first, held for 24 hours under a random key that only your browser and your sign-in link carry. If you open the link, they become your business’s details in the workspace; if you don’t, they are deleted when the 24 hours end.
• Drafts you have not kept: when you draft a document, the draft and the checks run on it are held for 24 hours, readable only by your signed-in account, and then deleted. Keep it and it becomes a saved document. Delete your account and any held draft goes with it.
• Billing information: if you subscribe to a paid plan, payment is handled directly by Stripe. We receive confirmation that you’re subscribed and which plan, never your card details. If you pay a professional you work with, you pay on the professional’s own Stripe account; what that means is under Who we share information with.
• If you are a professional: what you put on your public profile (your name, headline, what you offer and at what price, a photo and a logo if you add them, the times you take calls, and any openings you post). Anyone can read it once you publish it, and you choose whether search engines may list it. You can take it down at any time.
• If you are an affiliate: the name and contact address you give us, your code, your Stripe account’s id and whether it can receive payouts, when you accepted the Affiliate Program Terms, and the record of what you earned and were paid. Stripe collects your identity, bank account and tax form to pay you, and keeps them; we never see them.
• A call you ask to book from a professional’s profile: your name, email address, the time you chose and any note you write, which go to that professional. It is kept with their profile and deleted with it; ask us and we will remove it sooner.
• If you run a business in the Management Workspace: the business’s name, size and industry; the figures you type in or import from a spreadsheet (we keep the rows, not the file); your targets, objectives, initiatives, milestones, decisions, risks, wins and their files, and saved scenarios; each monthly briefing, frozen from your records, with its PDF and its fingerprint, and each capability statement in the same way, with the company details you add to it (a website, a contact, codes and registrations, certifications), and each case study and lender or investor packet in the same way; each RFP, contract or partnership you read, as its text (a file you upload is read for its text and not kept), with the requirements read from it and your rulings on them; the prospects in your sales pipeline, with the contact you type for each (a name, an email or a phone, as you choose), their stage, your estimate of their value, your notes and follow-ups, and the stage weights you set; your meetings, with who is expected as you type them, the agenda, the minutes, the actions agreed (with the names you give them) and each meeting pack, with its PDF and its fingerprint; your obligations calendar, with each obligation as you type it, with whom it is owed, when it falls due and how often, how many days ahead to remind you, its cost if you give one, your note and when it was last done; your capability assessments, with each answer you give and the report of any you issue, with its PDF and its fingerprint; an assessment by our staff, if you let one in to assess your business, with their ratings, notes, confidence, references and the sources they name, and their name; which of our staff you let in, and when; the email addresses you invite to the business’s team, with the role you offer and when the invitation lapses, and the people who join, with their role and when they joined, who kept each win and who each initiative is given to; when the business changes hands, who handed it to whom and when, with both names as they were; the people you credit on wins, with their email address if you give one, your note of their part, and whether they kept a record of it or declined; if you connect QuickBooks Online, which company is connected and when, the keys Intuit issues to read it (kept encrypted), and the figures you keep from its profit and loss; and, if you connect VendMetric, your VendMetric API key (kept encrypted) and its first characters, when it was connected and last kept in step, the obligations it brings for your contracts coming due and the figures of what you paid vendors. These can name people, such as an employee who owns an initiative or a client in a win, so keep that to what the work needs.
• If you are on a business’s team: that you are, with your role, when you joined and who invited you; on Staff, the areas the owner ticks for you to work in; the records you add to the business, which are the business’s; what is given to you there; whether your Monday list of it goes, and when it last went; and an invitation to your email address while it is open.
• Aggregate site analytics: page views on this marketing site, measured by Plausible, a privacy-first analytics service that does not use cookies and cannot identify you individually. On the business side we also count, by day, how many people answered each screen of the Business Intake and followed a link between the business and career sides: a number for each day, never who or what was typed.

How AI features work

Standing Proof works by hand by design. Nothing requires AI. When you actively choose an AI-assisted mode, the specific text involved (for example, a job posting and the proof records you selected) is sent to Anthropic’s Claude API to generate that one response. Nothing is sent anywhere unless you take that action, or a professional you invited takes it on the records you shared with them and have not withheld from AI, or our staff take it during an engagement you booked with us, or a Business Consultant you let into your business takes it there, or you are a professional putting something up for the board, as the next paragraph says. We do not use your career evidence to train AI models, ours or anyone else’s.

If you are a professional and put a profile, photo, logo or opening up for the board, an automated check reads it before it is public, to flag anything against our rules, and a person at Standing Proof reviews anything it flags. Nothing it flags is published until that person has decided, and we tell you why it was held. The check uses the same AI provider as the rest of Standing Proof, under the same terms: your content is not used to train its models.

In the Management Workspace, drafting a monthly briefing sends that month’s records, frozen as they stood (the figures and the lines each section is drawn from), to the same provider, under the same terms. It happens only when you press it, or when a Business Consultant you let in presses it for you.

Drafting a capability statement sends the wins in your Business Value Ledger that have a result, with what each records (the client, when, the problem, what was done, the result and how it was measured), to the same provider, under the same terms, only when you press it. The company details you add are printed as you typed them and are not sent.

Drafting a case study sends the one win it tells, with what that win records, to the same provider, under the same terms. Drafting a lender or investor packet sends the business’s name, industry and size, its revenue, expenses and cash for the twelve months the packet covers, and the wins you choose for its track record. Each happens only when you press it.

Reading an RFP, a contract or a partnership sends its text to the same provider, under the same terms, so it can list what the document asks for. Asking it to suggest wins sends the requirements you kept and the wins in your Business Value Ledger most relevant to them, with what each records. Each happens only when you press it; without it, the document is read by rule, here.

Asking the Owner’s Advisor a question sends the question, the conversation so far and facts written from your business’s records to the same provider, under the same terms, only when you or a manager ask. The facts are what is ticked in what it reads: by default all of it (the last closed month’s figures, the plan, decisions, risks, wins, prospects by name, obligations, meeting actions and the capability assessment’s result), and you can untick any of it; what is unticked is never sent. The conversation is not kept: it stays on your screen until you leave. We count how many questions are asked each month and whether an answer needed a figure marked, never what was asked or answered.

We never contact anyone in your sales pipeline, and no AI drafts from it. The Owner’s Advisor reads it, prospects by name with their stage, value and next steps, only when you or a manager ask it a question, and only while Pipeline is ticked in what it reads. Your Monday brief says how many follow-ups are due that week, never who they are with.

We never contact anyone you list in your obligations calendar, and no AI drafts from it. The Owner’s Advisor reads what is due, with whom it is owed, only when you or a manager ask it a question, and only while Obligations is ticked in what it reads. Your Monday brief says how many obligations fall due in the next 30 days, never what they are.

No AI scores your capability assessment: its scores are computed from your answers by rule. The Owner’s Advisor reads its result (the index, the stage and the weakest link) when asked a question, while Assessment is ticked in what it reads.

People you invite

You can invite a professional (a résumé writer, career coach, workforce counselor or mentor) into part of your record. This, and a case study or the evidence behind a résumé you send as a link (below), are the only ways another person sees any of it. None of them happens without you starting it, and an invitation is limited in every direction:

• You choose the records, one at a time. Nothing is shared by default, and anything you do not choose is never shown, previewed or counted to them.
• You choose what they can do from a list you tick. Downloading files attached to a record is its own permission and is never implied by being able to read it.
• You choose how long, and you can revoke immediately. Expiry and revocation are checked on every request, so access ends at once rather than when a page is next loaded.
• They cannot change your record. They can propose wording, which becomes part of your evidence only if you accept it. Who proposed and who accepted is retained.
• They keep private notes you cannot read. A professional’s own working notes about an engagement are not visible to you, are never part of your evidence or your export, and are deleted along with everything else if you delete your account.
• If they work in a firm on Standing Proof, your access is with the firm. The firm may assign your engagement to another of its verified professionals; you see who has it beside the firm’s name, and a line in your activity says when it changed. Their private notes do not move with it. You can end the firm’s access at any time.
• We verify professionals before they can accept an invitation. A person reviews each application; we store what the applicant tells us and do not gather information about them from anywhere else.

When access ends, the professional keeps nothing of your record. Your record, and any improvement they helped you make to it, stays with you. The one exception is an agreement you signed with them: if a professional sends you an agreement to sign and you sign it, it is kept for both of you, as you signed it, so either of you can show what you agreed. It holds the text, the name you typed, the email address of your account, and when you signed. If either of you deletes your account, it is deleted with it, so download the PDF to keep a copy.

A professional you work with can send you an intake form: their questions, which you answer once in Standing Proof. They see your answers while they work with you, as they see your record, and not after access ends. You keep them, and they go with either account.

You and a professional you work with can share files with each other: a draft they send you, or an old résumé you send them. Each is checked for malware before it is stored. You keep every file shared with that professional; they see them while they work with you, and not after access ends. Whoever shared a file can delete it, and the files go with either account. Your data export lists them by name, size and date; download each from where it was shared.

Case studies and evidence you send as a link

On paid plans you can turn experiences into case studies and send them to a client or a hiring panel as a link. You can also send the evidence behind one of your résumés as a link: each of its experience lines beside the experience it comes from. Only what you choose is on either:

• You choose the experiences (for a résumé’s evidence, they are the ones its lines come from), whether your contact details are on the page, and whether the note on what could substantiate each experience is. Nothing else from your record is.
• It shows what you sent. Editing an experience later does not change the page until you update the link.
• Anyone who has the link can open it, so send it only to the people you mean to read it. It is not listed, searchable, or indexed by search engines.
• It stops working after 30 days, or the time you chose, when you turn it off, when you delete an experience it shows, or when you delete your account. What it showed stays in your account, where you can see it, until you delete your account.
• We count how many times it is opened, and when last, and show you that. We do not record who opens it, and there is no analytics on the page.
• The page says what is on it is yours and that we have not verified it.

People named in your record

What you write can name other people: a manager who could confirm something, the team you worked with. We do not look them up, contact them, or add them to anything, and our staff cannot read what you wrote unless you invite them into your record. A case study you send prints the people you listed under “Worked with”, and prints the note on what could substantiate an experience only if you choose to include it.

If you are named in someone else’s record and want it taken out, write to privacy@standingproof.com. You do not need an account. We have no way to search records for a name, because no one here can read them, so tell us whose record it is (the email address on their account, if you know it) and what to remove. We will ask that person to take it out, and tell you when we have asked. We cannot remove it ourselves, and we cannot promise they will.

Staff access

Our staff see what they need to run the service, and every change they make is written to an audit trail: who, what and when. They can look up an account to resolve a problem you report: your plan, whether it is past the evidence threshold that unlocks the AI features, and whether the monthly allowance is used up. That screen does not show the contents of your Proof Records. They see the records of business you do with us: a call you book and the note you leave with it, an intake form you complete for an engagement, a quote or a gift, feedback you send, with the description your browser gives of itself, a message you send through the contact form or by email, and an application you send to the affiliate program. They review professional-access applications, which contain only what the applicant submitted about themselves. On a paid engagement, the staff member delivering it works on your records through the same invitation and permissions as any professional you invite.

If you run a business in the Management Workspace, a staff member sees it only if you let them in by name, and only while we have made them a Business Consultant: they can do what you allowed (type in figures, draft the monthly briefing, assess the business, set it up with you, work on the plan) until you end it. What they do is in the audit trail, and the workspace shows you who prepared a briefing, who typed in a figure, who released an assessment and who changed the plan, with the staff member’s name kept beside each change they made to it. Staff who oversee the service see a business’s name, its owner’s email address, its plan, and which staff member it let in and when, not its records.

If you run a business, you can let in your own professionals: an accountant, attorney, lender or insurance broker. Each sees only the parts of the business you open to them, never your team, its ownership, its capability assessment or our staff’s access, until you end it. We keep a trail of what each one opened and downloaded, and the notes, requests and suggested changes they leave with your answers and decisions, for you, with the business. A suggested change alters nothing until you accept it, and is then made in your name. A file you send in answer is kept with the request, and only that professional can open it while their access is open. If you are invited as a professional, we keep your address with the invitation, your license details as you state them, the trail of what you opened, and the notes, requests and suggestions you leave, with that business; an invitation you never accepted is deleted thirty days after it lapses or ends. Your duties of confidentiality to your client are yours.

You can also send an issued briefing or lender or investor packet as a link. Whoever has the link can open that one PDF, as issued, until the day you chose or until you turn it off. We keep when it was opened, so you can see it, and nothing about who opened it. The page it opens is not listed or indexed by search engines, and has no analytics.

If you run several businesses, or are on several teams, which one you have open is kept on your account, so it opens there on any device; each business’s records stay its own.

If you invite people to your business’s team, each sees it by their role: a Manager and a Viewer the whole business, Staff its plan and its wins and the areas you tick for them. You see their names and email addresses; they see each other’s names and roles, not their addresses. When something is given to someone on the team, we email them who gave it, what kind it is, in which business and when it is due, never what it says; on Mondays, while they keep it on, we email them how many of theirs are overdue or coming due, and nothing more. Each of those can be stopped. If you are on someone else’s team, they and the others on it see your name, your role and what you add, and never your own career record. An invitation goes to the email address typed, and whoever sent it is never told whether that address has an account here.

If you hand your business on to someone on its team, once they accept they see all of it as you did, including who typed each figure and kept each win, and you stay on the team as a Manager. Our staff’s access to it and its QuickBooks and VendMetric connections end with the hand-over. Your own career record, and any personal record of your part in its wins, stays yours and private.

If a business credits you on a win at your email address, once you sign in with that address you see the win as the business recorded it (its name, client, month, result and measure) and its note of your part. A record you keep from it holds what you write, and is yours and private: the business sees only that you kept one or declined, and is never told whether your address has an account here.

Who we share information with

We use a small number of service providers to run Standing Proof, each limited to the purpose below:

• Supabase: authentication and database hosting.
• Anthropic: AI-assisted analysis, only for content you submit to an AI mode, the check of what a professional puts up for the board before it is public, and the month a business’s briefing is drafted from, the wins its capability statement is drafted from, the win or figures its case studies and packet are drafted from, and the opportunities it reads and the wins it suggests for them, and the facts the Owner’s Advisor is given when someone asks it a question, as the business’s owner has chosen.
• Stripe: subscription billing and payment processing, and payments you make to a professional you work with. A payment to a professional is made on the professional’s own Stripe account: it is recorded there, with your email address, and the professional and Stripe each hold it under their own terms. We send Stripe the amount, the professional’s description, your email address and a reference number, and we receive whether it was paid, refunded or disputed. We never see your card details. Stripe also pays affiliates what they earn, to the accounts they set up with it.
• Vercel: application hosting.
• Plausible: cookieless, aggregate analytics of this marketing site. It is not loaded inside the application, on a case study or a résumé’s evidence sent as a link, or on the pages a sign-in, unsubscribe or booking-confirmation link opens.
• Resend: delivery of the email we send you (sign-in links, digests, booking confirmations, the newsletter if you ask for it, and the email before your 1:1s if you turn it on, the weekly brief if you run a business in the workspace and keep it on, an invitation to a business’s team or its credit on a win sent to your address, what someone on a business’s team gives you there and the Monday list of it, the reminder seven days before a business plan’s free trial is first charged, and what a professional you work with sends you through Standing Proof: a request to pay, a refund, an agreement to sign, an intake form to answer, a call booked from their profile), which means the address, subject and body of each message.
• Cloudmersive: malware scanning of any file you attach to a record or share with a professional, and of a file you attach to a business’s win, at upload time, which means the file’s contents.
• Cloudflare Turnstile: checking that a form or question is being sent by a person rather than a script. It runs on the booking form, the contact form, the affiliate application and an affiliate’s request for a new link to their page, the newsletter sign-up, and the question box that opens from the button on any page. It runs when you open one of those, not on every page you read. It receives signals from your browser, including your IP address, and Cloudflare states it cannot identify individuals from them. It is not advertising, and it does not track you across sites. Their Turnstile Privacy Addendum sets out what it collects.
• Daily: video calls held in Standing Proof, when you join a call from its link. It carries the call’s audio and video while it runs and the names of those on it. When everyone on the call agrees, and only then, its speech provider transcribes the call live; the words are used once, to suggest experiences for the client’s record, which the client accepts or declines. Recording is off and Daily is set not to keep transcripts, and we do not store the words either. We keep a record of who joined and whether each person agreed, and the name of anyone who asked the host to let them in. A guest who confirms with a code gets one by email; we keep only a scrambled form of it, for ten minutes’ use. On a call with EPS about working together, booked on business.standingproof.com, the transcript is kept when everyone agrees: we keep the words with that call’s record, for quality and to prepare what we send you after the call, for 12 months or for as long as you work with us, and delete them sooner if you ask. Nothing is recorded: no audio, no video. Daily keeps neither. EPS’s notes of that call are kept the same way. The summary of your needs we write from it is our work product, which we keep.

A service you connect yourself is not one of these: we read from it when you ask, and it holds your records under its own terms.

• Intuit QuickBooks Online: if you connect your QuickBooks Online company to the Business Owner Workspace, you sign in at Intuit and choose the company, and Intuit gives us keys to read it. We keep them encrypted and use them only to read the company’s name and its profit and loss and balance sheet by month: from the profit and loss, total income, cost of goods sold and expenses; from the balance sheet, the totals of bank accounts, accounts receivable and accounts payable at each month end; nothing else (no individual accounts, customers, invoices or transactions). They are read for the last 12 closed months when you or a manager presses Read, and, unless you switch it off, each closed month is read once on its own from the 5th of the next. We send Intuit only what reading needs: the keys and the months asked for. Nothing read when someone presses Read is kept until they keep it; a month read on its own is kept, but never in place of a figure someone put in by hand. Either way it is an import you can take back. Disconnecting asks Intuit to end the connection and deletes the keys here at once; figures you kept stay until you take their import back. When a call to QuickBooks fails, we keep a note of it for three months, to fix it with Intuit’s support: when it happened, which company, what failed and what Intuit answered, with Intuit’s reference for it. Never the keys, and never a figure from your books.
• VendMetric: VendMetric is another product of Enterprise Professional Systems LLC, the company behind Standing Proof, but a separate service with its own terms and its own account. If you use it for your vendors, you can connect it to the Management Workspace with an API key an admin makes in VendMetric. We check the key with VendMetric, keep it encrypted, and use it only to read: your organization’s contracts that are active or expiring soon (each one’s title, reference, vendor, value, end date, notice deadline and how it renews), and the cash paid to vendors in each of the last 12 closed months as totals. Each contract coming due within a year becomes an obligation in your calendar, and the monthly totals become figures, never in place of one someone put in by hand. This happens when you connect, when you or a manager presses Sync now, and, unless you switch it off, once a day. We send VendMetric only the key and the months asked for, and write nothing to it. Disconnecting deletes the key here at once (revoke it in VendMetric too); the obligations and figures it brought stay until you remove them.

We do not sell your information, and we do not share it with data brokers or advertisers.

What we never do

• We don’t sell your data.
• We don’t run ads or ad-tracking on this product.
• We don’t use your career evidence to train AI models.
• We don’t share your Proof Records or résumés with employers, recruiters, or anyone else. Standing Proof is a place you build evidence, not a place you’re listed. (The board lists only professionals who choose to put a profile on it, and only what they write.) The only ways anything reaches another person are that you invite them or send a case study or the evidence behind a résumé as a link, all described above; we never do any of them on your behalf.

Cookies

The application uses a cookie set by Supabase to keep you signed in. It is strictly necessary (nothing works without it) and it is not used for tracking or advertising. We set five more of our own, each holding one value, none of them shared with anyone:

• sp_ref, only when you arrive through a partner’s link: the partner’s code, for ninety days, so they are credited if you create an account.
• sp_onboarding, only when you try the paste on the site before you have an account: a reference to that draft, for twenty-four hours, so it can become your first record when you sign up.
• sp_business_intake, only when you start the Business Intake on the business side of the site: a reference to your answers, for twenty-four hours, so its second screen can follow its first.
• sp_bw_mode, only when you choose day or night on the business side or in the Business Owner Workspace: which you chose, for a year. Choosing “Device” removes it.
• sp_collab_theme, only for a professional working on a client’s record: whether they chose the light or dark view.

Plausible doesn’t need a cookie, and the bot check runs inside a frame served by Cloudflare, so anything it needs to remember is theirs rather than ours. The question box remembers in your browser that it has already greeted you, and nothing else.

The newsletter

If you ask for our newsletter, from the newsletter page, the box on the sign-up form, or Settings, we keep your email address and a record of your consent: where you asked, the words beside the box or form you used, and when you confirmed. Nothing is sent until you press the button in the confirmation email we send you.

A request from the box on the sign-up form is confirmed only if you finish signing in that day. If you don’t, we never send the confirmation, and we delete the request within a week.

You do not need an account. If you create one later with the same address, the two are linked, so your subscription and your account are one record.

Every issue has a one-click unsubscribe, and Settings turns it off. When you unsubscribe we keep your address with the date you asked us to stop, so we never send to it again by mistake. Deleting your account deletes it, and if you have no account, email us and we delete it.

Your rights and choices

• Export everything. Your account settings include a full export of your data as a single archive, any time you want it, with the files you attached to your records inside it, up to 250 MB of them. Files past that are listed in the archive and stay downloadable from each record. It holds your career record and everything you made from it. It leaves behind records that are about running the product rather than about your career, and the archive lists each one it leaves out and why: how your account was used, meaning the usage counts and the AI meter described above; your messages to us about the product; who you invited, what you shared and what happened on it, all of which you can see in Settings, including when you had calls with a professional (what was said is never kept); wording a professional proposed is in your record once you accept it; a professional's private notes about working with you, which are theirs; a professional practice you belong to or were invited to, an application to be a verified professional with our decision on it, and a company you run in the Management Workspace or are on the team of, with its figures, its plan, its setup, its kept documents, its wins, its monthly briefings, its capability assessments, its team and invitations, the areas each member works in and what is given to whom, who has owned it, who it credited, the EPS staff let in and what they changed in its plan, and the professionals its owner let in with the trail of what they saw (and, as a professional, your license as you state it), which its owner and managers download from that workspace's own export; what you bought or booked from us, meaning quotes, gifts, AI and call-hour top-ups, a business's setup with a consultant and engagements (the documents an engagement produced are included, and the receipts are in Stripe); your newsletter subscription, shown in Settings, and the issues and pictures, which are our publication; account housekeeping, meaning a class code you redeemed, a review list held while a document is imported, a draft you have not kept (held for 24 hours), and the record of which evidence fed which draft (the drafts you kept are included); our staff's audit trail of actions on your account, which is about us and is anonymized if you delete the account.
• Correct anything. Every piece of information you’ve entered is editable from inside the app, with one exception. On the Starter plan, an experience past the 30 most recently touched is frozen: still readable, and in your export, but not editable until you delete one you no longer need or move up a plan. The Terms describe it.
• Stop the newsletter. Use the unsubscribe link in any issue, or turn it off in Settings.
• Delete your account. There’s a delete button in Settings that destroys your record immediately. You can also email us. What is kept after deletion, and why, is listed under Data retention.

Data retention

We keep your information for as long as your account is active. If you delete your account, we delete your data. We don’t keep a shadow copy around. The few records that outlast an account are listed below, each with what it holds and why.

Some records expire before that. The product’s own usage telemetry (which screens were used, and the AI reads the meter counts) is kept for twelve months and then deleted. The log of what a collaborator proposed on your account and what you accepted is kept for twenty-four months. Neither holds the content of anything you wrote. A document you drafted and did not keep is deleted twenty-four hours after it was drafted.

A message you send through the contact form, an email you write to us that we log beside it, or an application you send to the affiliate program is kept for twelve months after it is answered or closed, and then deleted. If you delete an account with the same email address, it goes with the account. If you have no account and want one removed sooner, write to us and we will remove it.

If you are a professional, each check of what you put up for the board, what it found and what we decided is kept for as long as your profile exists, so that we can show why something was held or taken down. An agreement you signed with a professional, or sent as one, is kept for both of you until either of you deletes your account.

A business you run in the Management Workspace is kept for as long as your account, read-only once a plan ends. Deleting your account deletes the business with it: its records, its files and its briefings’ PDFs, and those of its capability statements, case studies and packets, meeting packs and assessment reports, and the opportunities it read, too. Download it from the workspace first if you want to keep a copy. The keys to a connected QuickBooks Online company are deleted when you disconnect it, when Intuit stops accepting them, or with your account. A VendMetric API key is deleted the same way: when you disconnect, when VendMetric stops accepting it, when the business changes hands, or with your account.

An invitation to a business’s team that nobody answers lapses after 14 days and is deleted 30 days after that. If you leave a team or are removed from it, your place on it ends at once, and so does your access. What you added stays the business’s. Deleting your account removes you from any team, and what you added is no longer linked to you, though a name shown in its plan stays there as text, as any name the owner types does. Whatever was given to you there goes back to no one when you leave, are removed or are made a Viewer. An offer of a business that nobody accepts is deleted 30 days after it lapses; one that is accepted is kept with the business as the record that it changed hands. A business’s credit on a win, and the address it was offered to, are the business’s, kept until it removes them or the business is deleted; a record you made from one stays yours either way.

If you took part in a sponsored cohort, deletion adds one to a counter on that cohort recording that a seat was taken by someone who has since left. The counter holds no name, email, timestamp or results. We also keep a record that your sign-in used that class code, holding only the code and an internal account number, so the same sign-in cannot take a second seat by deleting and returning. The counter exists so a sponsoring organization’s already-delivered participation figures stay accurate rather than quietly shrinking. Your outcomes are not kept in the cohort’s results.

If a member of our staff ever acted on your account (extending a class grant, or reviewing a professional-access application), a record that they did so survives deletion, with everything about you removed from it. The identifier and the before-and-after values are stripped in the same operation that deletes your account, leaving only that a staff member performed an action on a date. It exists so we remain accountable for what our own people did, which deletion should not be a way to erase, and it says nothing about you.

If you bought something from us (a quote we invoiced, an intake form for an engagement, a gift certificate, a call you booked), the commercial record survives deletion, because an invoice is not ours to erase. Your name, address, phone number and anything you wrote on it are replaced with “Deleted account” in the same operation that deletes your account; the amounts, dates and status remain. If you worked as a professional on somebody else’s record, your address and name are removed from their record of that work in the same way, and your private notes are destroyed. If you buy a gift and give the address of the person it is for, we keep that address on the gift only to check that the account redeeming it has it, and use it for nothing else.

If you arrived through a partner’s referral link, the commission records owed to that partner keep each payment’s amount and date against the same internal account number, with nothing else about you, because the partner is still owed them.

If you are an affiliate, what we hold about you is kept while you are one, and afterward for as long as tax and accounting law requires us to keep a record of payments. Once nothing is owed either way, ask us and we will remove your contact address and name from it.

Your sign-in email address is also kept after deletion, so we know an account once existed at that address. That is what stops free grants and class codes being claimed repeatedly by deleting and signing up again. It is held with its sign-in timestamps and the same internal account number, so while it is kept, the class-code and commission records above can be matched to it. It is linked to no career history and no results. Ask us and we will remove it, and that link with it, within 30 days. Everything else you entered is destroyed.

Our database is backed up daily, and each backup is kept for seven days. A deleted account stays in those copies until they are overwritten, at most seven days after you delete it. If we ever had to restore from a backup, we would delete again every account deleted since that backup was taken, before the restored copy is used. To do that we keep a list of deleted accounts, each an internal account number and the date and nothing else, for eight days, and then delete it.

If you paid us, Stripe, our payment processor, keeps its own record of your payments, saved card and invoices, as card networks and tax law require. Deleting your account here does not delete that record at Stripe. Ask us and we will delete your customer record at Stripe, which removes any saved card; the payment records Stripe must keep stay with Stripe. A payment you made to a professional is recorded in the professional’s own Stripe account, and we cannot delete it there.

Children's privacy

Standing Proof is a career tool for working adults and job seekers. It isn’t directed at children, and we don’t knowingly collect information from anyone under 16.

Changes to this policy

If this policy changes in a material way, we’ll update the date at the top of this page and, where appropriate, let you know directly.

Contact

Questions about any of this? Email privacy@standingproof.com.