Privacy Policy

1. Scope

This Privacy Policy applies to the ProxVanta website, product, APIs, and related services. It covers information we collect directly from users, from organizations using ProxVanta, and from connected third party services such as source control, backlog, design, billing, and identity providers.

2. Information We Collect

We may collect the following categories of information:

• Account information such as name, email address, login method, and organization membership.
• Workspace and product data such as organizations, groups, Agent Briefs, prompts, repository links, product metadata, and settings.
• Usage data such as feature interactions, Agent Brief usage counts, recent activity, and operational logs.
• Connected service data returned through authorized integrations such as GitHub, Linear, Figma, Stripe, and similar providers.
• Billing data such as subscription status, Stripe customer IDs, invoices, and webhook events. Payment card details are handled by Stripe and are not stored by ProxVanta.
• Customer content that users choose to store in ProxVanta, including Agent Brief definitions, instructions, examples, markdown, and organization-specific context.

3. How We Use Information

We use information to:

• Provide, operate, secure, and improve ProxVanta.
• Authenticate users and manage organizations, permissions, and access.
• Power Agent Brief discovery, private customization, publishing, collaboration, MCP access, and related product functionality.
• Process subscriptions, manage billing, prevent abuse, and maintain service reliability.
• Support users, troubleshoot issues, monitor performance, and investigate misuse or fraud.
• Communicate important product, account, security, or legal updates.

4. Customer Content and Prompts

ProxVanta stores customer-provided content needed to deliver the product, such as Agent Brief instructions, private instructions, connected context, and exported markdown. Organizations are responsible for the content they choose to store or process through the service.

ProxVanta may store product usage metadata to support collaboration, product analytics, operations, and billing. Prompt body storage, if offered for a workspace, is controlled by product settings and customer choices.

5. Sharing of Information

We do not sell personal information. We may share information with:

• Service providers that help us operate the service, such as hosting, infrastructure, analytics, email, and billing providers.
• Connected third-party platforms when users explicitly authorize an integration or invoke functionality that depends on it.
• Professional advisers, legal authorities, or counterparties when reasonably necessary to protect rights, enforce terms, comply with law, or address security incidents.
• A successor entity in connection with a merger, acquisition, restructuring, or sale of assets.

6. Data Retention

We retain information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and audit records. Retention may vary by data type and workspace settings.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure, and we cannot guarantee absolute security.

8. International Processing

ProxVanta and its service providers may process information in multiple countries. By using the service, users understand that data may be transferred to and processed in jurisdictions other than their own.

9. Your Choices

Users and organizations may be able to access, update, or delete certain information from inside the product. For privacy requests or questions, contact matt@proxvanta.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and provide additional notice where appropriate.

11. Contact

Questions about this Privacy Policy can be sent to matt@proxvanta.com.