Privacy Policy
Provett is based in Melbourne, Australia. This policy explains what data we collect, how we use it, and how we protect it. We've kept it short and in plain English.
What we collect
When you use Provett, we may collect:
- Uploaded files — subcontractor quotes, variation claims, scope of works documents, original subcontracts, and any other files you upload for vetting. These are processed to generate your Vett output.
- Project context — project name, trade, project type, and budget information you enter into the form fields.
- Email address — only if you choose to provide it (for example, to save or share a Vett).
- Basic usage data — page visits, feature usage, and error logs to help us improve the product.
How we use your data
- To generate your Vett — uploaded files are sent to Anthropic's Claude API for extraction, comparison, and variation assessment. File content is processed in real time and is not used by Anthropic to train their models (per Anthropic's API data policy).
- To store your Vetts — completed Vett outputs are stored in our database (Supabase) so you can access them later if you've provided an email.
- To improve Provett — we may analyse aggregate, anonymised usage patterns (for example, which trade packages are most commonly vetted) to improve the product. We do not review individual quote content for this purpose.
- To contact you — only if you've provided an email, and only about your Vetts or important product updates. No marketing spam.
What we don't do
- We do not sell your data to anyone.
- We do not share your uploaded files with other users.
- We do not use your quote data to train AI models.
- We do not store uploaded files after your Vett is generated — files are processed in memory and discarded.
Data storage and security
Vett outputs are stored in Supabase (hosted in Australia where available, otherwise nearest region). Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to Provett administrators only.
Your rights
You can request deletion of any data associated with your email address at any time by contacting us. We will action deletion requests within 7 days.
Third-party services
Provett uses the following third-party services to operate:
- Anthropic (Claude API) — for quote extraction, comparison analysis, and variation assessment
- Supabase — for database storage
- Vercel — for hosting
- Cloudflare — for DNS and security
- Resend — for transactional email
Each of these services has their own privacy policies. We select services that meet reasonable data protection standards.
Changes to this policy
We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of Provett after changes constitutes acceptance.
Contact
Questions about this policy? Email [email protected].