Privacy Policy

We collect only what the product needs to do its job:

• Account information. Your name and email address, and the credentials used to sign in. Passwords are handled and hashed by our authentication provider — we never see or store your password in plain text.
• Project data you enter. The content you put into the app: deal terms and assumptions, budgets and schedules, RFIs and submittals, change orders, daily logs, investor and capital records, contacts, and documents or photos you upload. This is your working data, and it’s the reason the app exists.
• Files you import or export through connected storage. If you connect a cloud storage provider (OneDrive today; Google Drive once it’s live), we access only the specific files you select to import, and files we write when you choose to export. We do not browse, index, or read the rest of your storage account. The access token for your storage provider is held securely by our connection broker (Nango) and is never stored in our database or exposed to your browser.
• Operational records. Basic technical data needed to run the service — sign-in sessions, and logs of transactional emails we send (such as invitations and notifications) so delivery can be audited and rate-limited.

We use your information to provide and operate the service — nothing more:

• To run your models, store your projects, and show you your own data.
• To send transactional email you or your collaborators trigger: collaborator invitations, portal magic-links, and RFI/submittal/investor notifications.
• To enable the sharing and portal features you choose to use (see below).
• To keep the service secure, diagnose problems, and prevent abuse.

We do not use your project data to train machine-learning models, and we do not use it for advertising.

We do not sell your data. Your data is shared in only two ways:

• When you choose to share it. Sharing is owner-controlled and explicit. You decide who to invite as a collaborator and which subcontractors or investors get a portal, and exactly what each one can see. Access is granted per person through a grant that is checked on the server on every request, so revoking access takes effect on the next request — not the next login. A subcontractor sees only their schedule, RFIs, and the documents shared with them; an investor sees only their own capital account and distributions. Restricted collaborators are served a redacted copy of the project — the hidden parts are never sent, not merely hidden from view.
• With the service providers that run the platform (our “sub-processors”), described in the next section.

We use a small set of established providers to run the platform. Each processes only what its function requires:

• Supabase — database, authentication, and file storage. Your account and project data live here.
• Resend — delivery of transactional email (invitations, magic-links, notifications).
• Nango — the OAuth broker that securely holds the connection to your cloud storage provider so its access token never reaches your browser or our database.
• Vercel — application hosting and delivery.

These providers act on our behalf and are not permitted to use your data for their own purposes.

We operate from Canada, but the service providers listed above run primarily on infrastructure located in the United States. As a result, your data may be stored and processed outside Canada, including in the United States, where privacy laws differ from Canada’s and where data may be subject to lawful access by foreign authorities.

By using the service, you consent to this cross-border transfer, storage, and processing of your data. We choose providers that maintain recognized security practices, but we cannot control the laws of the countries in which they operate.

The app uses cookies and browser storage strictly to keep you signed in and to remember your preferences and unsaved work. We do not use third-party advertising trackers, and we do not sell or share this information for cross-site advertising.

We keep your data for as long as your account is active and you need it to use the service. When you delete a project it is removed from active storage. When you close your account, we delete your account and associated project data, except where we are required to retain certain records, or where residual copies persist temporarily in encrypted backups that age out on a rolling basis. You can request deletion at any time (see below).

• You can access, review, and edit most of your data directly in the app at any time.
• You can export your project data from within the app.
• You can disconnect a storage provider at any time, which revokes our access to it.
• You can request a copy of your data, correction of it, or deletion of your account by emailing us.

To make any of these requests, contact leoevaz1927@gmail.com.

Data is encrypted in transit. Access to your projects is enforced on the server through per-user and per-grant rules, not merely hidden in the interface, and provider access tokens are never exposed to the browser. No system is perfectly secure, but we design the product so that access boundaries are enforced where they cannot be inspected around.

ProForma is a business tool intended for professional use. It is not directed to children, and we do not knowingly collect information from anyone under the age of majority in their jurisdiction.

We may update this policy as the product evolves. When we do, we’ll revise the effective date at the top. Material changes will be communicated where reasonable. Continued use of the service after an update means you accept the revised policy.

Questions about this policy or your data? Email leoevaz1927@gmail.com. See also our Terms of Service.