What we collect, why, and what we don't.

Short version

Proof of Tech runs a marketing site and an intake form. We collect the information you give us when you contact us about an engagement. We do not sell it, do not share it with advertising networks, and do not use it to train models.

What this site does

proofoftech.org is a static website. There are no first-party analytics, no third-party trackers, and no advertising pixels. We do not set cookies on the marketing pages.

When you submit the intake form, your name, work email, company, service-area selection, problem description, and timeline are sent over TLS to a secure, access-controlled database and stored encrypted at rest; a copy is emailed to our team so we can reply. The form is protected by an automated abuse-prevention check. We retain intake records for up to twelve months unless you ask us to delete yours sooner.

The newsletter

Subscribing to Field Notes stores your email address in a secure, access-controlled database. We send one confirmation email to check the address is yours — you are only added to the list once you click the link in it. One-click unsubscribe is at the bottom of every issue. We do not share the subscriber list with anyone outside the firm.

Engagement data

During a paid engagement we frequently process your data on your infrastructure under your access controls. Anything we host on our side is governed by the signed engagement letter and follows your data-handling requirements. The defaults we ship with TEE-based and FHE-based architectures are described in our FHE vs. TEE post.

Your rights

EU and UK residents have access, correction, deletion, and portability rights under GDPR. California residents have the analogous rights under the CCPA. To exercise any of them, email privacy@proofoftech.org and we will respond within 30 days.

Contact

Questions, complaints, or requests: privacy@proofoftech.org. For a formal data-protection inquiry, include "Article 15 request" or "CCPA request" in the subject line and we will route it to the right person on day one.

This policy is plain-English on purpose. If anything is ambiguous and you need a binding interpretation before transacting, ask us — we will write you something specific you can rely on.