Privacy policy

Last updated 31 October 2026

What we collect

• Account data: your email address and password hash (held by Supabase Auth), display name and shop name.
• Rights profile: the name, address, phone and registration details you choose to enter so we can fill in filing kits.
• Your images and listings: photos you upload or import from your Etsy CSV, their SHA-256 fingerprints and the times they were recorded.
• Scan results: public web pages where matching images were found, and your notes on cases.
• Billing: subscription status from Lemon Squeezy. We never see or store your card details.
• Free scan: a salted, one-way hash of your IP address (to prevent abuse) and your email if you choose to give it. Images sent to the free scan are not stored.

How we use it

To run the service: to store your proof vault, run scans, prepare documents, send case reminders you've turned on, process billing, and prevent abuse. We don't sell your data or use your images to train models.

Who processes it

• Supabase: database, authentication and file storage.
• Vercel: hosting, and Vercel Web Analytics for anonymous page-view counts.
• Google Cloud Vision: your images are sent for reverse-image search when a scan runs. See Google's Cloud Vision data usage terms for how Google handles images it processes.
• Lemon Squeezy: payments, as merchant of record.
• Resend: reminder emails, if enabled.

Retention and deletion

We keep your data while your account is open. Deleting a design deletes its images and matches. Deleting your account deletes all of your data within 30 days, except billing records we must keep by law.

Your rights

You can access, correct, export or delete your data. You can download a copy of your data from Settings → Your data, and correct or delete it in the app. For anything else, email privacy@getmadeproof.com. If you are in the EU, UK or Ghana, you may also complain to your data protection authority.

Security

Every database table enforces row-level security, so your data is visible only to your account. Files are kept in a private bucket and served through short-lived signed links, and every connection is encrypted.

Cookies

We use only essential cookies: one to keep you signed in. Your light or dark theme choice is stored in your browser's local storage. There are no advertising or tracking cookies.

Analytics

We use Vercel Web Analytics to count page views and see which pages are useful. It doesn't use cookies or build a profile of you across sites. Visits are aggregated, and Vercel identifies a session by a hash of the request that's discarded daily. Before anything is sent, we strip query strings (which can contain listing links you clipped) and replace record IDs in page addresses, so the specific designs and cases you open are never shared.