Privacy Policy

We collect account information such as name, email address, authentication details, workspace membership, role, preferences, and support communications.

We collect workspace and merchant information such as business name, website, connected account identifiers, diagnostics, product issue summaries, notes, assignees, evidence files, screenshots, generated reports, client portal activity, and audit logs.

We collect billing and transaction information such as plan, billing email, subscription status, PayPal customer references, referral attribution, invoices, receipts, and payment state. Payment credentials are processed by payment providers and are not stored as full card details by MerchantProof.

When you connect a Google account, MerchantProof uses the granted access to read and organize Merchant Center diagnostics, product issue data, account status, and related operational metadata for the workspace you authorize.

Google user data is used to provide and improve visible product features, maintain security, troubleshoot integrations, and comply with law. We do not sell Google user data, use it for advertising, or transfer it except as needed to provide the service, comply with law, protect users, or support a user-directed integration.

We may collect technical information such as IP address, browser type, device details, pages viewed, feature usage, timestamps, errors, performance logs, and security events.

This information helps us secure the service, debug issues, understand product usage, improve reliability, and maintain auditability for sensitive workspace actions.

We share information with service providers that help operate the product, including hosting, database, authentication, storage, email, analytics, logging, customer support, and payment processing providers.

Workspace owners and administrators may view, export, share, or delete certain workspace information depending on their permissions. Client portals and signed links may expose selected materials to people you authorize.

We may disclose information if required by law, to protect the rights and safety of users or MerchantProof, to investigate abuse, or in connection with a merger, acquisition, financing, or sale of business assets.

We use cookies and similar technologies for authentication, session security, preferences, analytics, product diagnostics, and fraud prevention. You can control cookies through your browser, but some parts of the service may not work without required cookies.

We keep information for as long as needed to provide the service, maintain business records, support security and audit requirements, resolve disputes, enforce agreements, and comply with law.

Workspace owners may request deletion of certain workspace data. Some records may remain for limited periods in backups, logs, billing records, security records, or legal compliance archives.

We use administrative, technical, and organizational safeguards designed to protect user and workspace information, including permission controls, private storage patterns, token protection, signed links, and audit logging for sensitive actions.

No internet service can be guaranteed to be perfectly secure. You should use strong credentials, limit workspace access, review invited users, and contact us promptly if you believe your account or workspace has been compromised.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. You can also disconnect integrations, update account information, unsubscribe from non-essential emails, or request workspace deletion through support.

If your information is controlled by a workspace owner, agency, or client organization, we may direct certain requests to that organization so it can respond as the controller of the workspace data.

MerchantProof may process information in the United States and other countries where we or our providers operate. Those countries may have different data protection rules than your location.

MerchantProof is a business product and is not intended for children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy as the product, providers, security practices, or legal requirements change. If changes are material, we will provide reasonable notice through the product, by email, or by updating this page.