Pruvvn handles customer feedback and business account data, so security is built into how we design and run the platform. This page describes our general approach; it is not an exhaustive technical specification.
Pruvvn encrypts data in transit using HTTPS/TLS. Business and customer data stored in our systems is encrypted at rest by our infrastructure providers.
Access to production systems and customer data is restricted to employees and contractors who need it to operate and support the platform, and is governed by authentication requirements on our internal tools. We review access periodically and revoke it promptly when it's no longer needed.
Where Pruvvn connects to third-party platforms — such as Google's Business Profile integration or Meta's Facebook and Instagram APIs — we use those providers' official, authorized integration methods and store only the access tokens and account identifiers needed to operate the connection. You can revoke these connections at any time, either from your Pruvvn account settings or directly from the third-party platform's own permissions page, as described in our Privacy Policy.
We retain business and customer data for as long as your account is active and as needed to provide the service. If you close your account or request deletion, we'll remove or anonymize the associated data within a reasonable period, except where we're required to retain certain records by law.
We monitor our production systems for abnormal activity and maintain an internal process for investigating and responding to security incidents. If we determine that an incident has affected your account data, we'll notify you in a timely manner consistent with applicable law.
If you believe you've found a security vulnerability in Pruvvn, please report it to us before disclosing it publicly, so we have a chance to investigate and address it. We take these reports seriously and will work with you in good faith.
Security questions or vulnerability reports can be sent to sales@pruvvn.com.