Privacy policy

Controller

CiviQs B.V. (KVK 94498164) is the controller of your personal data when you use ProveAI. Contact: [email protected].

Data collected

We collect and process:

  • Email address (to deliver your report link)
  • Organisation name and AI system name (to personalise your report)
  • Your answers to the 25 assessment questions (to generate the report)
  • Payment data (processed by Stripe — we do not store card details)
  • Analytics data (anonymised page views via Umami, self-hosted)

Purpose and legal basis

Your data is processed for the performance of the contract between you and CiviQs B.V. (GDPR Art. 6(1)(b)) — to generate and deliver the assessment report you requested. We do not use your data for marketing unless you explicitly opt in.

AI processing

Your answers are sent to Anthropic's Claude API (via a secure proxy) for scoring and report generation. Anthropic processes this data as a sub-processor. Anthropic's API does not use customer data for model training. See Anthropic's privacy policy.

Data retention

Assessment data (answers, scores, reports) is retained for 12 months after creation, then automatically deleted. Report access links expire 90 days after payment. You may request immediate deletion at any time.

Third parties

We share data only with:

  • Stripe (payment processing)
  • Anthropic (AI processing for report generation)

We do not sell, rent, or otherwise share your personal data with third parties for their own purposes.

Your rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, port, and object to processing of your personal data. To exercise these rights, email [email protected].

Cookies

We use a single session cookie (proveai_session) to maintain your assessment state. This is a strictly necessary cookie and does not require consent. We use Umami for analytics, which does not use cookies and is fully GDPR compliant.

Complaints

You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Last updated: February 2026